bugsnag-maze-runner 7.30.0 → 7.30.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3c132077721ff7826d0a4e3735f61ddfeaacc94c85adc0da7f638e0b8469c867
-  data.tar.gz: b62473d6c7a69a7d7f2be846e142f4860d1485ddd24b7e70647828971d7b0909
+  metadata.gz: 75bf49e2ef2be5fb751ede3a2d633f82c876680c213979585a15848368e58e6e
+  data.tar.gz: c0c0f2172353f1cfd0db10966b5080cb1fdf899dda0fa2a89ccf76930f95f5a1
 SHA512:
-  metadata.gz: 2d8e5613c8a6f989f21cb1bf51b86248ae9f70acbaf10521e7ef41621ea2e5e21e320da23d5d2c736f3b269de1e0a23d0623bcfd3b7c1df54992c5d26c883dd6
-  data.tar.gz: 95143189aa779a5b8c8ac5bec5214bc9705ccba94165d2158fca2e4a6cd55100a1dc45369b307cd99a73642198334729732d94215f7c905074f13743a55c5dcb
+  metadata.gz: a37a7e7cf01aba09e4002839e505e9f544d961c342e5abbefef32f662ff3c162db67da2616cb7fd6ce58a7997853d0bd657637a6ab3fcbbfb4f6b0a037a30713
+  data.tar.gz: 801b67b0e8713096551a907d9fdd7b1d522efd6aef8bf37af9a57cdf974128b6d3ec10de3ddaeb893a94a7fc64b2f3f2a4a984f05970d1eca775dc1cedb54233

data/lib/maze/repeaters/aspecto_repeater.rb

@@ -25,6 +25,10 @@ module Maze
               end
         URI.parse(url)
       end
+
+      def include_header?(key, _value)
+        true unless key.start_with? 'bugsnag'
+      end
     end
   end
 end

data/lib/maze/repeaters/bugsnag_repeater.rb

@@ -25,6 +25,11 @@ module Maze
               end
         URI.parse(url)
       end
+
+      def include_header?(key, value)
+        # Include all headers apart from the API key, which is set separately
+        key != 'bugsnag-api-key'
+      end
     end
   end
 end

data/lib/maze/repeaters/request_repeater.rb

@@ -18,19 +18,25 @@ module Maze
         uri = url_for_request_type
 
         Net::HTTP.start(uri.host, uri.port, :use_ssl => true) do |https|
-          onward_request = Net::HTTP::Post.new(uri)
+          onward_request = Net::HTTP::Post.new(uri.path)
           onward_request.body = decompress(request)
 
           # Set all headers that are present, unless Gzip is not supported
           request.header.each do |key,value|
+            # Only include content-type header if gip is supported
             next if !gzip_supported && key.downcase == 'content-encoding'
-            next if key.downcase.start_with? 'bugsnag'
+
+            # All other headers are opt-in to avoid accidental leakage
+            next unless include_header? key.downcase, value
 
             onward_request[key] = value
           end
+
+          # Set headers specific to the repeater
           set_headers onward_request
 
-          https.request(onward_request)
+          response = https.request(onward_request)
+          log_response response
         end
       end
 
@@ -42,6 +48,7 @@ module Maze
 
       def decompress(request)
         if !gzip_supported && %r{^gzip$}.match(request['Content-Encoding'])
+
           reader = Zlib::GzipReader.new(StringIO.new(request.body))
           reader.read
         else
@@ -56,6 +63,25 @@ module Maze
       def url_for_request_type
         raise 'Method not implemented by this class'
       end
+
+      def include_header?(_key, _value)
+        raise 'Method not implemented by this class'
+      end
+
+      def log_response(response)
+        log "HEADERS:"
+        response.header.each_header do |key, value|
+          log "  #{key}: #{value}"
+        end
+
+        log
+        log "BODY:"
+        log response.body
+      end
+      
+      def log(message = '')
+        $logger.debug message
+      end
     end
   end
 end

data/lib/maze/servlets/servlet.rb

@@ -170,8 +170,9 @@ module Maze
       # if configuration says so.
       def check_digest(request)
         header = request['Bugsnag-Integrity']
-        if header.nil? && Maze.config.enforce_bugsnag_integrity
-          raise 'Bugsnag-Integrity header must be present according to Maze.config.enforce_bugsnag_integrity'
+
+        if header.nil? && Maze.config.enforce_bugsnag_integrity && %i[sessions errors traces].include?(@request_type)
+          raise "Bugsnag-Integrity header must be present for #{@request_type} according to Maze.config.enforce_bugsnag_integrity"
         end
         return if header.nil?
 

data/lib/maze.rb

@@ -7,7 +7,7 @@ require_relative 'maze/timers'
 # Glues the various parts of MazeRunner together that need to be accessed globally,
 # providing an alternative to the proliferation of global variables or singletons.
 module Maze
-  VERSION = '7.30.0'
+  VERSION = '7.30.2'
 
   class << self
     attr_accessor :check, :driver, :internal_hooks, :mode, :start_time, :dynamic_retry, :public_address,

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: bugsnag-maze-runner
 version: !ruby/object:Gem::Version
-  version: 7.30.0
+  version: 7.30.2
 platform: ruby
 authors:
 - Steve Kirkland
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-05-11 00:00:00.000000000 Z
+date: 2023-05-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: cucumber