github
/
secure_headers
зеркало из https://github.com/github/secure_headers.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
289 коммитов 17 Ветки 92 Теги 2,6 MiB
Граф коммитов

29 Коммитов

Автор SHA1 Сообщение Дата
Nate Collings 69f9a3d4b7 Rails 4 specs 2015-01-18 15:51:59 -07:00
Steve Agalloco f3739695e9 added XPermittedCrossDomainPolicies header support 2014-11-15 22:18:26 -05:00
Neil Matatall 6c197e9810 Add hash source support 
This allows you to whitelist inline scripts by providing the hash values. There are some smarts here that will autoamtically compute hashes in dev/test and warn you if things are going to blow up.

A warning message is printed to the console if an unknown hash is mentioned.
 2014-11-06 18:49:21 -10:00
Neil Matatall e96a31bdf4 remove a ton of cruft 2014-10-14 23:09:09 -07:00
Neil Matatall 4fdee91c81 remove the report forwarder and other jank 2014-10-13 22:21:06 -07:00
Neil Matatall e35ec69f90 Merge pull request #105 from spagalloco/x-download-options 
X-Download-Options header support
 2014-08-28 11:35:41 -07:00
Steve Agalloco 7e6aae5431 X-Download-Options header support 2014-08-28 14:29:50 -04:00
Steve Agalloco 76eb76fca3 remove ActiveRecord dependency from integration tests 2014-08-28 10:31:12 -04:00
Neil Matatall 85b923c310 Merge branch 'master' into enforce_lambda 
Conflicts:
	fixtures/rails_3_2_12/spec/controllers/other_things_controller_spec.rb
	lib/secure_headers/headers/content_security_policy.rb
 2014-08-08 15:09:50 -07:00
Neil Matatall 106fded12c add backwards-compatibility layer for nonces 2014-08-08 08:56:02 -07:00
Neil Matatall 46b14c773c Add standard CSP level 2 nonce 2014-08-07 21:12:04 -07:00
Neil Matatall 9908ae6fa1 goodbye spork and simplecov, tired of you 2014-08-07 20:17:25 -07:00
Neil Matatall 6f125459d1 goodbye spork and simplecov, tired of you 2014-08-07 14:43:45 -07:00
Neil Matatall 957bef2787 fix tests from fake apps 2014-08-07 13:58:19 -07:00
Neil Matatall 689e8d3bbf fixture test cleanup 2014-06-09 15:33:51 -07:00
Neil Matatall 6ed9e8fcdf update underlying tests 2013-11-04 16:08:41 -08:00
Reed Loden 3e07467925 Send X-Content-Type-Options header to Chrome users as well (not just IE) and improve tests 
* Chrome supports the X-Content-Type-Options header for a few use cases
  (including not processing JavaScript for text/plain content types), so
  send the X-Content-Type-Options header to Chrome users (fixes #53).
* Clean up HSTS tests to better match other header tests.
* Test X-XSS-Protection header on all browsers.
* Test X-Content-Type-Options header on both IE and Chrome.
 2013-05-17 20:11:45 -07:00
Reed Loden c442c4756f A few changes related to XFO, a typo fix, and spec test description improvements 
* Two changes to X-Frame-Options, as per current spec draft
  (https://tools.ietf.org/html/draft-ietf-websec-x-frame-options-02)
  - Use 'X-Frame-Options' instead of 'X-FRAME-OPTIONS'
  - Make the colon after X-Frame-Options: ALLOW-FROM optional

* Fix typo in README for 'widely supported' config

* Improve spec test descriptions
 2013-05-07 01:04:23 -07:00
Neil Matatall 35cb65285e housecleaning 2013-02-19 19:20:24 -08:00
Neil Matatall 66a4cf3c20 ignore more 2013-02-19 16:36:03 -08:00
Neil Matatall 5198678270 Fix 1.9.3 syntax issue and Gems 2013-02-19 16:33:20 -08:00
Neil Matatall 84e2ca48e5 ignore logs 2013-02-19 16:14:15 -08:00
Neil Matatall a8c789f1ef spork issues? 2013-02-19 16:14:15 -08:00
Neil Matatall 55f4a6e940 more cruft 2013-02-19 16:14:15 -08:00
Neil Matatall 69ddfe17e8 slim down rails a bit 2013-02-19 16:14:15 -08:00
Neil Matatall deab292e4d Add missing fixture files 2013-02-19 16:14:15 -08:00
Neil Matatall a41f624e65 wip 2013-02-19 16:14:15 -08:00
Neil Matatall 873593bac3 unload some dependencies 2013-02-19 16:14:14 -08:00
Neil Matatall 28b0886949 include all the things 2013-02-19 16:14:14 -08:00