BSD Ports

security/rubygem-omniauth-rails_csrf_protection 1.0.2 DragonFly

Mitigation against CVE-2015-9284 for OmniAuth

System
DragonFly
Repository
DPorts
Maintainer
[email protected] (as in FreeBSD)
License
MIT
Categories
rubygems, security
Package size
4.9 KiB, 10.5 KiB installed

Description

This gem provides a mitigation against CVE-2015-9284 (Cross-Site Request Forgery on the request phrase when using OmniAuth gem with a Ruby on Rails application) by implementing a CSRF token verifier that directly utilize `ActionController::RequestForgeryProtection` code from Rails.

In the other systems

SystemPortVersion
DragonFlysecurity/rubygem-omniauth-rails_csrf_protection1.0.2
FreeBSDsecurity/rubygem-omniauth-rails_csrf_protection1.0.2
HardenedBSDsecurity/rubygem-omniauth-rails_csrf_protection1.0.2
GhostBSDsecurity/rubygem-omniauth-rails_csrf_protection1.0.2

Install

Binary package:

pkg install rubygem-omniauth-rails_csrf_protection

From DPorts:

cd /usr/dports/security/rubygem-omniauth-rails_csrf_protection && make install clean

Dependencies

Run dependencies 4

No port depends on this one.