omniauth / omniauth-oauth2 / 39809210010

100%

push

github

Require omniauth 2.2

omniauth 2.2.0 adds OmniAuth.config.allowed_hosts, which rejects forged
hosts before the request and callback phases build a callback URL from
them. Requiring it means every app on this release can turn that on.
See https://github.com/omniauth/omniauth/security/advisories/GHSA-m27g-v28p-f9fx

With 2.2.0 on RubyGems.org, Steep can check against its shipped types
without pulling omniauth from git.

24 of 24 branches covered (100.0%)

Branch coverage included in aggregate %.

103 of 103 relevant lines covered (100.0%)

16.25 hits per line