add deprecation warnings for headers that will no longer accept a hash for config

Author: oreoshake

lib/secure_headers/headers/strict_transport_security.rb

@@ -41,6 +41,7 @@ def value
 
     def validate_config
       if @config.is_a? Hash
+        warn "[DEPRECATION] secure_headers 3.0 will only accept string values for StrictTransportSecurity config"
         if !@config[:max_age]
           raise STSBuildError.new("No max-age was supplied.")
         elsif @config[:max_age].to_s !~ /\A\d+\z/

lib/secure_headers/headers/x_content_type_options.rb

@@ -25,6 +25,7 @@ def value
       when String
         @config
       else
+        warn "[DEPRECATION] secure_headers 3.0 will only accept string values for XContentTypeOptions config"
         @config[:value]
       end
     end

lib/secure_headers/headers/x_download_options.rb

@@ -24,6 +24,7 @@ def value
       when String
         @config
       else
+        warn "[DEPRECATION] secure_headers 3.0 will only accept string values for XDownloadOptions config"
         @config[:value]
       end
     end

lib/secure_headers/headers/x_frame_options.rb

@@ -25,6 +25,7 @@ def value
       when String
         @config
       else
+        warn "[DEPRECATION] secure_headers 3.0 will only accept string values for XFrameOptions config"
         @config[:value]
       end
     end

lib/secure_headers/headers/x_permitted_cross_domain_policies.rb

@@ -25,6 +25,7 @@ def value
       when String
         @config
       else
+        warn "[DEPRECATION] secure_headers 3.0 will only accept string values for XPermittedCrossDomainPolicies config"
         @config[:value]
       end
     end

lib/secure_headers/headers/x_xss_protection.rb

@@ -25,6 +25,7 @@ def value
       when String
         @config
       else
+        warn "[DEPRECATION] secure_headers 3.0 will only accept string values for XXssProtection config"
         value = @config[:value].to_s
         value += "; mode=#{@config[:mode]}" if @config[:mode]
         value += "; report=#{@config[:report_uri]}" if @config[:report_uri]

spec/lib/secure_headers/headers/x_content_type_options_spec.rb

@@ -1,3 +1,5 @@
+require 'spec_helper'
+
 module SecureHeaders
   describe XContentTypeOptions do
     specify{ expect(XContentTypeOptions.new.name).to eq("X-Content-Type-Options") }

spec/lib/secure_headers/headers/x_xss_protection_spec.rb

@@ -1,3 +1,5 @@
+require 'spec_helper'
+
 module SecureHeaders
   describe XXssProtection do
     specify { expect(XXssProtection.new.name).to eq(X_XSS_PROTECTION_HEADER_NAME)}