aikido-zen 1.7.1 → 1.7.2.beta.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ddee51760626c0c9d7af69137f88286d0b49ac9d5aab02d17bebbff71136bb0f
-  data.tar.gz: 7b5ea9701c89111b1423c99750495b7a4d85b725e78008d93b110e4a2be9007c
+  metadata.gz: 9df9011f3e8f6d0df4ea0b12df6ed7202c0b91eda333f4318a6217b379702fc9
+  data.tar.gz: d13cd7f6f6cf72aa8dd0d76ff5bfc44dbb5620701ea3179f10f543587703695c
 SHA512:
-  metadata.gz: edada0391a4cc9f6982dddedd67e6972a13ddb60fad9c723cd1c369e36c3ba5699637dbfacce686c1472e6009e9927f69dcb16945ae7c41c65745e110cff614d
-  data.tar.gz: aa43771cf0fb387c55d35fc1f26b3e765ce0c36ed29764ad677fca7d4f69459310a3115088f73a2df65e35d2bc145dc6a6e2294d20ec4aed35cc81fce96de80a
+  metadata.gz: 5853f8f8cb5f74f439d155165ec137a965778741707537bce4dbc035f2f76529ed92910569b89137599f61b9e706f5fcacd95391e0157100f93326417e913df5
+  data.tar.gz: 1c742e2f46dde686ae8f70c65d7cfb0dd8fb552d10b9bff5b9b22934e25be3d8cc2c3a92cf7487e2d3c5884ca1803f585a4e7029f90564cb353563bc5960c220

data/lib/aikido/zen/attack_wave/helpers.rb

@@ -16,7 +16,26 @@ module Aikido::Zen
       def self.suspicious_request?(context, status_code)
         request = context.request
 
-        suspicious_method?(request.request_method) || suspicious_path?(request.path_info, status_code)
+        suspicious_method?(request.request_method) || suspicious_path?(original_path(request), status_code)
+      end
+
+      # Rails rewrites PATH_INFO to /status before invoking an exceptions_app.
+      # Returns the path that Rails rewrote.
+      # @param request [Aikido::Zen::Request]
+      # @return [String]
+      def self.original_path(request)
+        request.env["action_dispatch.original_path"] || request.path_info
+      end
+
+      # Rails rewrites PATH_INFO to /status before invoking an exceptions_app.
+      # Returns the path that Rails rewrote, including the same query string.
+      # @param request [Aikido::Zen::Request]
+      # @return [String]
+      def self.original_fullpath(request)
+        path = original_path(request)
+        query = request.query_string
+
+        query.empty? ? path : "#{path}?#{query}"
       end
 
       def self.suspicious_method?(method)

data/lib/aikido/zen/attack_wave.rb

@@ -35,7 +35,7 @@ module Aikido::Zen
         context.request.then do |request|
           @samples[client_ip] <<= Sample.new(
             verb: request.request_method,
-            path: request.fullpath
+            path: AttackWave::Helpers.original_fullpath(request)
           )
         end
 

data/lib/aikido/zen/version.rb

@@ -2,7 +2,7 @@
 
 module Aikido
   module Zen
-    VERSION = "1.7.1"
+    VERSION = "1.7.2.beta.1"
 
     # The version of libzen_internals that we build against.
     LIBZEN_VERSION = "0.1.61"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aikido-zen
 version: !ruby/object:Gem::Version
-  version: 1.7.1
+  version: 1.7.2.beta.1
 platform: ruby
 authors:
 - Aikido Security
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-08-10 00:00:00.000000000 Z
+date: 2026-08-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: concurrent-ruby