aikido-zen 1.0.5-x86_64-linux → 1.0.6-x86_64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '038a4a3ebe5b18a24d2d0c72aa38319d17eca94b8d76c6438787bbb8036e829b'
-  data.tar.gz: b7692b625d54de4888dbca11164c30f69632b6fd69f9ae8f285725b4a5dff196
+  metadata.gz: fcb954bfa0020ac930f8362c236a09055a0c31cf94fa6b9572991b2086a9845f
+  data.tar.gz: 46defcdb08de5e5ba8347d64c5d879ff553318cb09b53a764171cdabbd6d7553
 SHA512:
-  metadata.gz: 9d8e872dff224e451c63f1c236f77f20438d5d9385df6b2e25d51a01c2b7360f174356989bfc78d527b05c8dd9c931726eed61998c4de76dbf554b1ab8c18d76
-  data.tar.gz: '0387c1eaa9e1be45fa418553b3e1e92fbf15d7f470a6650285ffd71c60b03f286da550b6042b2ef7125fb15ddf7f8147c7b6e8bcdb0cc72fff339ab5f1760e88'
+  metadata.gz: 6d5aea3e9b99873ca59e3a843e0bcb458c20fdc59466b7245ae8ab28d8acac979c3b2b5f806493fa27125f5efe74f90bc2aa3f16136b5ea12c4475569ebb06e2
+  data.tar.gz: 0be76f562519e3e6deae35667ca90387bad23b5dfb5c34e633de5dd20b6f33f518cce78cc87ca24d8710086b1cea91391f54bfccdbd0144112ee05eaf64acb3c

data/docs/config.md

@@ -5,15 +5,6 @@ changing values on the `Aikido::Zen.config` object, which you can do from
 your app's startup file (like an initializer in Rails, or `config.ru` in
 other Rack-based apps).
 
-## Middleware insertion
-
-By default, the Zen middleware is inserted after `ActionDispatch::Executor`.
-You can change this by setting `Aikido::Zen.config.insert_middleware_after`
-to a Rack middleware class or index.
-
-When set to `nil`, the middleware is inserted before the first middleware in
-the then-current middleware stack.
-
 ## Disable Zen
 
 In order to fully turn off Zen and prevent it from intercepting any requests or
@@ -45,11 +36,23 @@ set it via `Aikido::Zen.config.token = <token>`.
 
 ## Hardened mode
 
-Zen hardens methods, restricting dangerous undocumented behavior to improve
-security and performance.
+Zen hardens certain methods by blocking dangerous, undocumented behavior.
+This helps improve security and performance.
+
+Hardened mode is enabled by default. To disable it, set `AIKIDO_HARDEN=false`
+in your environment, or set `Aikido::Zen.config.harden = false`.
+
+When Zen detects dangerous undocumented behavior, it prevents the operation
+and raises an error, including a backtrace. For example, if code relies on
+undocumented behavior in `File.join`, Zen will raise a descriptive error:
+
+```
+TypeError: Zen prevented implicit conversion of Array to String in hardened method. Visit https://github.com/AikidoSec/firewall-ruby for more information.
+...
+```
 
-To disable method hardening, set `AIKIDO_HARDEN=false` in your environment,
-or set `Aikido::Zen.config.harden = false`.
+Only disable hardened mode if you are using code that relies on dangerous
+undocumented behavior and that code cannot be changed.
 
 ## Logger
 

data/lib/aikido/zen/version.rb

@@ -2,7 +2,7 @@
 
 module Aikido
   module Zen
-    VERSION = "1.0.5"
+    VERSION = "1.0.6"
 
     # The version of libzen_internals that we build against.
     LIBZEN_VERSION = "0.1.48"

data/lib/aikido/zen/worker.rb

@@ -28,7 +28,8 @@ module Aikido::Zen
       executor.post do
         yield
       rescue Exception => err # rubocop:disable Lint/RescueException
-        @config.logger.error "Error in background worker: #{err.inspect}"
+        @config.logger.error("Error in background worker: #{err.class}: #{err.message}")
+        @config.logger.debug(err.backtrace.join("\n"))
       end
     end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aikido-zen
 version: !ruby/object:Gem::Version
-  version: 1.0.5
+  version: 1.0.6
 platform: x86_64-linux
 authors:
 - Aikido Security
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-12-23 00:00:00.000000000 Z
+date: 2025-12-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: concurrent-ruby