Tyler Rick

Add global enabled option so we can toggle it on and off for different tests

4

Resolves #30 (Also resolves/supersedes #27) Currently based on #29 but could be rebased. - [x] Add tests - [x] Update docs

Rename ambiguous min_password_matches/min_password_matches_warn option to threshold… to match pwned gem

1

The `min_password_matches` option seems misnamed to me. Model validations are usually worded in a way that describes what is required for the user to be _valid_: - Look at the...

See #26

#16 added this to docs: > By default the value set above is used to reject passwords and warn users. > Optionally, you can add the following snippet to `config/initializers/devise.rb`...

It would be useful to be able to configure the pwned_password checking feature to be disabled by default — this is what we would want in _most_ tests, so that...

Remove auto-adding after jquery.js script — Sprockets 4 (nor webpack-based javascript_pack_tag 'application') doesn't add a separate script tag for jquery

2

In both a real app that I just upgraded to sprockets 4 and the `spec/dummy` app in this project, I noticed that `javascript_include_tag "application"` no longer injects a separate script...

Automatically add a nonce to script tag if a csp-nonce meta tag is available to get it from

6

Resolves #100

The assumption that a project even includes/uses jQuery is rather unsafe and unusual these days. But the core of this project is still valuable in the modern post-jQuery Rails world,...

[Support of Ruby 2.4 has ended](https://www.ruby-lang.org/en/news/2020/04/05/support-of-ruby-2-4-has-ended/) so we should stop wasting time officially supporting it and remove it from .travis.yml. See also https://github.com/rails/sprockets/pull/672 / https://github.com/rails/sprockets/pull/604/files, which also made Ruby 2.5...

Allow it to work with strict Content Security Policy; add nonce to javascript_include_tag

1

I've used this gem before with success, but I just tried adding it to an app that happens to have a strict CSP and am running into this error: ```...