robertodecurnex / rack-jsonp-middleware
100%

DEFAULT BRANCH: master
Repo Added
Files 2
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH master
branch: SELECT
CHANGE BRANCH
x

45

push

travis-ci

robertodecurnex 
Merge pull request #16 from valverde/patch-1

Prevent Rosetta Flash attack

1 of 1 new or added line in 1 file covered. (100.0%)

56 of 56 relevant lines covered (100.0%)

19.29 hits per line

Relevant lines Covered
56 RELEVANT LINES 56 COVERED LINES
19.29 HITS PER LINE
Source Files on master
Coverage ∆ File Lines Relevant Covered Missed Hits/Line

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
45 master Merge pull request #16 from valverde/patch-1 Prevent Rosetta Flash attack push robertodecurnex travis-ci pending completion  
44 master Correct jsonp_spec content-lengths Pull #16 valverde travis-ci pending completion  
43 master Update tests for Rosetta Flash vuln patch Pull #16 valverde travis-ci pending completion  
42 master Prevent Rosetta Flash attack Refer to http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/ for a description of the vulnerability. This simple patch prevents the attack from working. Pull #16 valverde travis-ci pending completion  
41 master Block Rosetta Flash vulnerability This is to combat the vulnerability discussed here. http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/ It is an optional feature so as to not confuse people with the new output. It prepends `/**/` ... Pull #15 markabe travis-ci pending completion  
40 master disable RBX (travis + rbx env problems) push robertodecurnex travis-ci pending completion  
39 master Merge pull request #14 from farleyknight/patch-1 Fixed misspell push robertodecurnex travis-ci pending completion  
38 master Fixed misspell Pull #14 farleyknight travis-ci pending completion  
37 master Add option to restrict the JSONP delivery to a path prefix. Pull #13 MGPalmer travis-ci pending completion  
7 master Update README.md push robertodecurnex travis-ci pending completion  
See All Builds (18)