canon 0.3.70 → 0.3.71

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5a8ff57b9e99197b824e486af4f029cd005cce5e263cfa7433a3e7351d356d55
-  data.tar.gz: 9737c271ceeaa5be0358f56f86891e02cd5c34c099721b6ba3deaaf107937256
+  metadata.gz: 958eeca178b78a0f3de23eb6ab23674aacb3fee50c6671da8911b1225431278f
+  data.tar.gz: e9d9cee428547b4117a7b15e335f9b31ae0c76bb9120c76b0f362e5a499dfde8
 SHA512:
-  metadata.gz: d2f9294a68dc860dc315331b083b62e3661c42c69b1a44ac2984b0f29f39c998b6d90464972d04bdb763d370cc1668e8245e19a0db02eee4d1907946ab529ae1
-  data.tar.gz: d36159fe358cef45d398c7deb0137354dbfa5f78e45850adc28cdda30f821561797340dc0f58da1c51284d6c619f5403de52f2a7b7f1549bdcaf56ec02631c6d
+  metadata.gz: 17f11eed81fe5f50ef94ca58ea8ce3932281b0b478a8143439c148e15fd4519abe0d754e9a14d23b294f366523668c97ac21d96418190fbc7c65e3a86373b77a
+  data.tar.gz: 7a3cf3fb1b732e84a7167a7f184cd2085afa43023829f77021e91197c40c4e8d9f9910847ca18d641d144c3c7aecb55cea5657441e726f95833210f333bbc705

data/docs/features/environment-configuration/index.adoc

@@ -342,6 +342,17 @@ puts "Defaults: #{resolver.defaults.inspect}"
 puts "Source of algorithm: #{resolver.source_for(:algorithm)}"
 ----
 
+=== Engine digests: LEPTRIS_DIGEST_ATTR_ORDER
+
+Canon's XML digest gate reads one *engine-level* variable that belongs to
+libleptris, not to canon. Canon never sets it — the host decides:
+
+`LEPTRIS_DIGEST_ATTR_ORDER=1`:: Makes attribute order identity-bearing in
+libleptris' structural digests. Canon detects this and skips the SAX
+signature probe in verbose diff reports — attribute-order identity is then
+proven by the digest itself. Digest *values* change process-wide, so enable
+it only if nothing in your process persists leptris digests across restarts.
+
 == See also
 
 * link:size-limits/[Size Limits] - File size and node count limits

data/lib/canon/comparison/xml_comparator.rb

@@ -206,6 +206,10 @@ module Canon
           # already declined any recover-error document through the
           # wrapper's parse_diagnostics — the banner cannot be lost.
           return true if n1 == n2
+          # With order-sensitive digests (host-set flag), attribute
+          # order is digest-proven as well — the signature probe has
+          # nothing left to answer.
+          return true if Xml::DigestGate.attr_order_digest?
 
           left = Xml::Sax.probe(n1)
           return false if left.saw_error?

data/lib/canon/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Canon
-  VERSION = "0.3.70"
+  VERSION = "0.3.71"
 end

data/lib/canon/xml/digest_gate.rb

@@ -30,6 +30,17 @@ module Canon
         !doc.parse_diagnostics.empty?
       end
 
+      # Whether the HOST opted into attribute-order-sensitive digests
+      # (libleptris 1.9.228 honors LEPTRIS_DIGEST_ATTR_ORDER per
+      # digest call; leptris#1297). Canon reads the env — never
+      # writes it: the flag re-spaces digest values process-wide, so
+      # enabling it is the host's call, not a library's. When set,
+      # digest equality proves attribute-order identity too, and the
+      # verbose lane's signature probe becomes redundant.
+      def attr_order_digest?
+        ENV["LEPTRIS_DIGEST_ATTR_ORDER"] == "1"
+      end
+
       def available?
         return false if RUBY_ENGINE == "opal"
         return false unless Canon::XmlBackend.moxml? &&

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: canon
 version: !ruby/object:Gem::Version
-  version: 0.3.70
+  version: 0.3.71
 platform: ruby
 authors:
 - Ribose Inc.