Contents

require 'spec_helper'

module SecureHeaders
  describe StrictTransportSecurity do
    describe "#value" do
      specify { expect(StrictTransportSecurity.make_header).to eq([StrictTransportSecurity::HEADER_NAME, StrictTransportSecurity::DEFAULT_VALUE]) }
      specify { expect(StrictTransportSecurity.make_header("max-age=1234; includeSubdomains; preload")).to eq([StrictTransportSecurity::HEADER_NAME, "max-age=1234; includeSubdomains; preload"]) }

      context "with an invalid configuration" do
        context "with a string argument" do
          it "raises an exception with an invalid max-age" do
            expect do
              StrictTransportSecurity.validate_config!('max-age=abc123')
            end.to raise_error(STSConfigError)
          end

          it "raises an exception if max-age is not supplied" do
            expect do
              StrictTransportSecurity.validate_config!('includeSubdomains')
            end.to raise_error(STSConfigError)
          end

          it "raises an exception with an invalid format" do
            expect do
              StrictTransportSecurity.validate_config!('max-age=123includeSubdomains')
            end.to raise_error(STSConfigError)
          end
        end
      end
    end
  end
end

Version data entries

27 entries across 27 versions & 1 rubygems

Version	Path
secure_headers-3.3.2	spec/lib/secure_headers/headers/strict_transport_security_spec.rb
secure_headers-3.3.1	spec/lib/secure_headers/headers/strict_transport_security_spec.rb
secure_headers-3.3.0	spec/lib/secure_headers/headers/strict_transport_security_spec.rb
secure_headers-3.2.0	spec/lib/secure_headers/headers/strict_transport_security_spec.rb
secure_headers-3.1.2	spec/lib/secure_headers/headers/strict_transport_security_spec.rb
secure_headers-3.1.1	spec/lib/secure_headers/headers/strict_transport_security_spec.rb
secure_headers-3.1.0	spec/lib/secure_headers/headers/strict_transport_security_spec.rb