vidibus-xss 0.1.11 → 0.1.12
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- data/VERSION +1 -1
- data/lib/vidibus/xss/extensions/controller.rb +5 -1
- data/vidibus-xss.gemspec +2 -2
- metadata +4 -4
data/VERSION
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
0.1.
|
|
1
|
+
0.1.12
|
|
@@ -15,7 +15,7 @@ module Vidibus
|
|
|
15
15
|
|
|
16
16
|
# Set hostname of clients that are allowed to access this resource.
|
|
17
17
|
def xss_clients
|
|
18
|
-
|
|
18
|
+
[request.headers["Origin"]]
|
|
19
19
|
end
|
|
20
20
|
|
|
21
21
|
protected
|
|
@@ -29,6 +29,10 @@ module Vidibus
|
|
|
29
29
|
def xss_client
|
|
30
30
|
@xss_client ||= begin
|
|
31
31
|
return unless origin = request.headers["Origin"]
|
|
32
|
+
unless xss_clients
|
|
33
|
+
raise %(Define a list of xss_clients in your ApplicationController that returns all hosts that are allowed to access your service.\nExample: %w[http://myconsumer.local])
|
|
34
|
+
end
|
|
35
|
+
xss_clients = [xss_clients] unless xss_clients.is_a?(Array)
|
|
32
36
|
xss_clients.detect { |c| c == origin }
|
|
33
37
|
end
|
|
34
38
|
end
|
data/vidibus-xss.gemspec
CHANGED
|
@@ -5,11 +5,11 @@
|
|
|
5
5
|
|
|
6
6
|
Gem::Specification.new do |s|
|
|
7
7
|
s.name = %q{vidibus-xss}
|
|
8
|
-
s.version = "0.1.
|
|
8
|
+
s.version = "0.1.12"
|
|
9
9
|
|
|
10
10
|
s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
|
|
11
11
|
s.authors = ["Andre Pankratz"]
|
|
12
|
-
s.date = %q{2010-09-
|
|
12
|
+
s.date = %q{2010-09-24}
|
|
13
13
|
s.description = %q{Drop-in XSS support for remote applications.}
|
|
14
14
|
s.email = %q{andre@vidibus.com}
|
|
15
15
|
s.extra_rdoc_files = [
|
metadata
CHANGED
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: vidibus-xss
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
hash:
|
|
4
|
+
hash: 3
|
|
5
5
|
prerelease: false
|
|
6
6
|
segments:
|
|
7
7
|
- 0
|
|
8
8
|
- 1
|
|
9
|
-
-
|
|
10
|
-
version: 0.1.
|
|
9
|
+
- 12
|
|
10
|
+
version: 0.1.12
|
|
11
11
|
platform: ruby
|
|
12
12
|
authors:
|
|
13
13
|
- Andre Pankratz
|
|
@@ -15,7 +15,7 @@ autorequire:
|
|
|
15
15
|
bindir: bin
|
|
16
16
|
cert_chain: []
|
|
17
17
|
|
|
18
|
-
date: 2010-09-
|
|
18
|
+
date: 2010-09-24 00:00:00 +02:00
|
|
19
19
|
default_executable:
|
|
20
20
|
dependencies:
|
|
21
21
|
- !ruby/object:Gem::Dependency
|