Sha256: a0736c7f361b2c9e0e7201567c34278505671f3eba8823f8e77920a914e00968

Contents?: true

Size: 1.64 KB

Versions: 36

Compression:

Stored size: 1.64 KB

Contents

require 'spec_helper'

module SecureHeaders
  describe XXssProtection do
    specify { expect(XXssProtection.make_header).to eq([XXssProtection::HEADER_NAME, XXssProtection::DEFAULT_VALUE]) }
    specify { expect(XXssProtection.make_header("1; mode=block; report=https://www.secure.com/reports")).to eq([XXssProtection::HEADER_NAME, '1; mode=block; report=https://www.secure.com/reports']) }

    context "with invalid configuration" do
      it "should raise an error when providing a string that is not valid" do
        expect do
          XXssProtection.validate_config!("asdf")
        end.to raise_error(XXssProtectionConfigError)

        expect do
          XXssProtection.validate_config!("asdf; mode=donkey")
        end.to raise_error(XXssProtectionConfigError)
      end

      context "when using a hash value" do
        it "should allow string values ('1' or '0' are the only valid strings)" do
          expect do
            XXssProtection.validate_config!('1')
          end.not_to raise_error
        end

        it "should raise an error if no value key is supplied" do
          expect do
            XXssProtection.validate_config!("mode=block")
          end.to raise_error(XXssProtectionConfigError)
        end

        it "should raise an error if an invalid key is supplied" do
          expect do
            XXssProtection.validate_config!("123")
          end.to raise_error(XXssProtectionConfigError)
        end

        it "should raise an error if mode != block" do
          expect do
            XXssProtection.validate_config!("1; mode=donkey")
          end.to raise_error(XXssProtectionConfigError)
        end
      end
    end
  end
end

Version data entries

36 entries across 36 versions & 1 rubygems

Version Path
secure_headers-3.9.0 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.8.0 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.7.4 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.7.3 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.7.2 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.7.1 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.7.0 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.6.7 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.6.6 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.6.5 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.6.4 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.6.3 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.6.2 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.6.1 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.6.0 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.5.1 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.5.0 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.5.0.pre spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.4.1 spec/lib/secure_headers/headers/x_xss_protection_spec.rb
secure_headers-3.4.0 spec/lib/secure_headers/headers/x_xss_protection_spec.rb