cloudsmith-api 0.52.92 → 0.53.79

Sign up to get free protection for your applications and to get access to all the features.
Files changed (279) hide show
  1. checksums.yaml +4 -4
  2. data/Gemfile.lock +3 -5
  3. data/README.md +18 -16
  4. data/build.json +1 -1
  5. data/docs/AlpinePackageUpload.md +2 -1
  6. data/docs/BadgesApi.md +1 -6
  7. data/docs/ConanPackageUpload.md +2 -1
  8. data/docs/DistrosApi.md +2 -12
  9. data/docs/EntitlementUsageMetric.md +8 -0
  10. data/docs/EntitlementsApi.md +10 -60
  11. data/docs/EntitlementsCreate.md +4 -0
  12. data/docs/EntitlementsPartialUpdate.md +4 -0
  13. data/docs/EntitlementsRefresh.md +4 -0
  14. data/docs/FilesApi.md +5 -30
  15. data/docs/FormatsApi.md +2 -12
  16. data/docs/MavenPackageUpload.md +2 -1
  17. data/docs/MetricsApi.md +4 -14
  18. data/docs/NamespacesApi.md +2 -12
  19. data/docs/OrgsApi.md +2 -12
  20. data/docs/Package.md +2 -1
  21. data/docs/PackageCopy.md +2 -1
  22. data/docs/PackageMove.md +2 -1
  23. data/docs/PackagesApi.md +50 -300
  24. data/docs/Quota.md +8 -0
  25. data/docs/QuotaApi.md +228 -0
  26. data/docs/QuotaHistory.md +8 -0
  27. data/docs/QuotaHistoryHistory.md +13 -0
  28. data/docs/RatesApi.md +1 -6
  29. data/docs/RawPackageUpload.md +2 -1
  30. data/docs/ReposApi.md +6 -36
  31. data/docs/RepositoryToken.md +9 -0
  32. data/docs/RepositoryTokenRefresh.md +9 -0
  33. data/docs/RepositoryTokenSyncTokens.md +9 -0
  34. data/docs/StorageregionsApi.md +2 -12
  35. data/docs/UserApi.md +2 -12
  36. data/docs/UsersApi.md +1 -6
  37. data/docs/VagrantPackageUpload.md +2 -1
  38. data/docs/VulnerabilitiesApi.md +264 -0
  39. data/docs/VulnerabilityScanResults.md +15 -0
  40. data/docs/VulnerabilityScanResultsList.md +14 -0
  41. data/docs/WebhooksApi.md +5 -30
  42. data/lib/cloudsmith-api.rb +8 -1
  43. data/lib/cloudsmith-api/api/badges_api.rb +1 -1
  44. data/lib/cloudsmith-api/api/distros_api.rb +2 -2
  45. data/lib/cloudsmith-api/api/entitlements_api.rb +10 -10
  46. data/lib/cloudsmith-api/api/files_api.rb +5 -5
  47. data/lib/cloudsmith-api/api/formats_api.rb +2 -2
  48. data/lib/cloudsmith-api/api/metrics_api.rb +5 -5
  49. data/lib/cloudsmith-api/api/namespaces_api.rb +2 -2
  50. data/lib/cloudsmith-api/api/orgs_api.rb +2 -2
  51. data/lib/cloudsmith-api/api/packages_api.rb +50 -50
  52. data/lib/cloudsmith-api/api/quota_api.rb +227 -0
  53. data/lib/cloudsmith-api/api/rates_api.rb +1 -1
  54. data/lib/cloudsmith-api/api/repos_api.rb +6 -6
  55. data/lib/cloudsmith-api/api/storageregions_api.rb +2 -2
  56. data/lib/cloudsmith-api/api/user_api.rb +2 -2
  57. data/lib/cloudsmith-api/api/users_api.rb +1 -1
  58. data/lib/cloudsmith-api/api/vulnerabilities_api.rb +281 -0
  59. data/lib/cloudsmith-api/api/webhooks_api.rb +5 -5
  60. data/lib/cloudsmith-api/configuration.rb +0 -7
  61. data/lib/cloudsmith-api/models/alpine_package_upload.rb +15 -5
  62. data/lib/cloudsmith-api/models/conan_package_upload.rb +15 -5
  63. data/lib/cloudsmith-api/models/{entitlement_token_metric.rb → entitlement_usage_metric.rb} +11 -26
  64. data/lib/cloudsmith-api/models/entitlements_create.rb +41 -1
  65. data/lib/cloudsmith-api/models/entitlements_partial_update.rb +41 -1
  66. data/lib/cloudsmith-api/models/entitlements_refresh.rb +41 -1
  67. data/lib/cloudsmith-api/models/maven_package_upload.rb +15 -5
  68. data/lib/cloudsmith-api/models/package.rb +15 -5
  69. data/lib/cloudsmith-api/models/package_copy.rb +15 -5
  70. data/lib/cloudsmith-api/models/package_move.rb +15 -5
  71. data/lib/cloudsmith-api/models/quota.rb +194 -0
  72. data/lib/cloudsmith-api/models/quota_history.rb +196 -0
  73. data/lib/cloudsmith-api/models/quota_history_history.rb +239 -0
  74. data/lib/cloudsmith-api/models/raw_package_upload.rb +15 -5
  75. data/lib/cloudsmith-api/models/repository_token.rb +91 -1
  76. data/lib/cloudsmith-api/models/repository_token_refresh.rb +91 -1
  77. data/lib/cloudsmith-api/models/repository_token_sync_tokens.rb +91 -1
  78. data/lib/cloudsmith-api/models/vagrant_package_upload.rb +15 -5
  79. data/lib/cloudsmith-api/models/vulnerability_scan_results.rb +279 -0
  80. data/lib/cloudsmith-api/models/vulnerability_scan_results_list.rb +264 -0
  81. data/lib/cloudsmith-api/version.rb +1 -1
  82. data/spec/api/metrics_api_spec.rb +1 -1
  83. data/spec/api/quota_api_spec.rb +83 -0
  84. data/spec/api/vulnerabilities_api_spec.rb +95 -0
  85. data/spec/models/alpine_package_upload_spec.rb +6 -0
  86. data/spec/models/conan_package_upload_spec.rb +6 -0
  87. data/spec/models/{entitlement_token_metric_spec.rb → entitlement_usage_metric_spec.rb} +7 -13
  88. data/spec/models/entitlements_create_spec.rb +24 -0
  89. data/spec/models/entitlements_partial_update_spec.rb +24 -0
  90. data/spec/models/entitlements_refresh_spec.rb +24 -0
  91. data/spec/models/maven_package_upload_spec.rb +6 -0
  92. data/spec/models/package_copy_spec.rb +6 -0
  93. data/spec/models/package_move_spec.rb +6 -0
  94. data/spec/models/package_spec.rb +6 -0
  95. data/spec/models/quota_history_history_spec.rb +72 -0
  96. data/spec/models/quota_history_spec.rb +42 -0
  97. data/spec/models/quota_spec.rb +42 -0
  98. data/spec/models/raw_package_upload_spec.rb +6 -0
  99. data/spec/models/repository_token_refresh_spec.rb +54 -0
  100. data/spec/models/repository_token_spec.rb +54 -0
  101. data/spec/models/repository_token_sync_tokens_spec.rb +54 -0
  102. data/spec/models/vagrant_package_upload_spec.rb +6 -0
  103. data/spec/models/vulnerability_scan_results_list_spec.rb +78 -0
  104. data/spec/models/vulnerability_scan_results_spec.rb +84 -0
  105. data/vendor/bundle/ruby/2.6.0/cache/crack-0.4.4.gem +0 -0
  106. data/vendor/bundle/ruby/2.6.0/cache/rspec-core-3.9.3.gem +0 -0
  107. data/vendor/bundle/ruby/2.6.0/extensions/x86_64-linux/2.6.0/autotest-fsevent-0.2.17/gem_make.out +1 -1
  108. data/vendor/bundle/ruby/2.6.0/extensions/x86_64-linux/2.6.0/ffi-1.13.1/gem_make.out +2 -2
  109. data/vendor/bundle/ruby/2.6.0/extensions/x86_64-linux/2.6.0/json-2.3.1/gem_make.out +1 -1
  110. data/vendor/bundle/ruby/2.6.0/gems/{crack-0.4.3 → crack-0.4.4}/lib/crack.rb +0 -0
  111. data/vendor/bundle/ruby/2.6.0/gems/{crack-0.4.3 → crack-0.4.4}/lib/crack/json.rb +5 -18
  112. data/vendor/bundle/ruby/2.6.0/gems/{crack-0.4.3 → crack-0.4.4}/lib/crack/util.rb +0 -0
  113. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.4/lib/crack/version.rb +3 -0
  114. data/vendor/bundle/ruby/2.6.0/gems/{crack-0.4.3 → crack-0.4.4}/lib/crack/xml.rb +0 -0
  115. data/vendor/bundle/ruby/2.6.0/gems/ffi-1.13.1/ext/ffi_c/Makefile +3 -3
  116. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/.document +0 -0
  117. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/.yardopts +0 -0
  118. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/Changelog.md +17 -0
  119. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/LICENSE.md +0 -0
  120. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/README.md +3 -3
  121. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/exe/rspec +0 -0
  122. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/autorun.rb +0 -0
  123. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core.rb +0 -0
  124. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/backtrace_formatter.rb +0 -0
  125. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/bisect/coordinator.rb +0 -0
  126. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/bisect/example_minimizer.rb +0 -0
  127. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/bisect/fork_runner.rb +6 -3
  128. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/bisect/server.rb +0 -0
  129. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/bisect/shell_command.rb +0 -0
  130. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/bisect/shell_runner.rb +0 -0
  131. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/bisect/utilities.rb +0 -0
  132. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/configuration.rb +10 -7
  133. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/configuration_options.rb +0 -0
  134. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/did_you_mean.rb +0 -0
  135. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/drb.rb +0 -0
  136. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/dsl.rb +0 -0
  137. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/example.rb +10 -3
  138. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/example_group.rb +2 -1
  139. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/example_status_persister.rb +0 -0
  140. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/filter_manager.rb +0 -0
  141. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/flat_map.rb +0 -0
  142. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters.rb +0 -0
  143. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/base_bisect_formatter.rb +0 -0
  144. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/base_formatter.rb +0 -0
  145. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/base_text_formatter.rb +0 -0
  146. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/bisect_drb_formatter.rb +0 -0
  147. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/bisect_progress_formatter.rb +0 -0
  148. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/console_codes.rb +0 -0
  149. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/deprecation_formatter.rb +0 -0
  150. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/documentation_formatter.rb +0 -0
  151. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/exception_presenter.rb +10 -2
  152. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/failure_list_formatter.rb +0 -0
  153. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/fallback_message_formatter.rb +0 -0
  154. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/helpers.rb +0 -0
  155. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/html_formatter.rb +0 -0
  156. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/html_printer.rb +0 -0
  157. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/html_snippet_extractor.rb +0 -0
  158. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/json_formatter.rb +0 -0
  159. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/profile_formatter.rb +0 -0
  160. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/progress_formatter.rb +0 -0
  161. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/protocol.rb +0 -0
  162. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/snippet_extractor.rb +0 -0
  163. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/formatters/syntax_highlighter.rb +0 -0
  164. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/hooks.rb +14 -9
  165. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/invocations.rb +1 -1
  166. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/memoized_helpers.rb +0 -0
  167. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/metadata.rb +0 -0
  168. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/metadata_filter.rb +0 -0
  169. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/minitest_assertions_adapter.rb +0 -0
  170. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/mocking_adapters/flexmock.rb +0 -0
  171. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/mocking_adapters/mocha.rb +0 -0
  172. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/mocking_adapters/null.rb +0 -0
  173. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/mocking_adapters/rr.rb +0 -0
  174. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/mocking_adapters/rspec.rb +0 -0
  175. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/notifications.rb +0 -0
  176. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/option_parser.rb +0 -0
  177. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/ordering.rb +0 -0
  178. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/output_wrapper.rb +0 -0
  179. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/pending.rb +0 -0
  180. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/profiler.rb +0 -0
  181. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/project_initializer.rb +0 -0
  182. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/project_initializer/.rspec +0 -0
  183. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/project_initializer/spec/spec_helper.rb +0 -0
  184. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/rake_task.rb +0 -0
  185. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/reporter.rb +0 -0
  186. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/ruby_project.rb +0 -0
  187. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/runner.rb +0 -0
  188. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/sandbox.rb +0 -0
  189. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/set.rb +0 -0
  190. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/shared_context.rb +0 -0
  191. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/shared_example_group.rb +0 -0
  192. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/shell_escape.rb +0 -0
  193. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/test_unit_assertions_adapter.rb +0 -0
  194. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/version.rb +1 -1
  195. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/warnings.rb +0 -0
  196. data/vendor/bundle/ruby/2.6.0/gems/{rspec-core-3.9.2 → rspec-core-3.9.3}/lib/rspec/core/world.rb +1 -0
  197. data/vendor/bundle/ruby/2.6.0/specifications/{crack-0.4.3.gemspec → crack-0.4.4.gemspec} +3 -15
  198. data/vendor/bundle/ruby/2.6.0/specifications/{rspec-core-3.9.2.gemspec → rspec-core-3.9.3.gemspec} +5 -5
  199. data/vendor/bundle/ruby/2.6.0/specifications/sys-uname-1.2.1.gemspec +1 -1
  200. metadata +213 -260
  201. data/docs/EntitlementTokenMetric.md +0 -9
  202. data/vendor/bundle/ruby/2.6.0/bin/safe_yaml +0 -27
  203. data/vendor/bundle/ruby/2.6.0/cache/crack-0.4.3.gem +0 -0
  204. data/vendor/bundle/ruby/2.6.0/cache/rspec-core-3.9.2.gem +0 -0
  205. data/vendor/bundle/ruby/2.6.0/cache/safe_yaml-1.0.5.gem +0 -0
  206. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/.gitignore +0 -8
  207. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/.travis.yml +0 -14
  208. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/Gemfile +0 -5
  209. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/History +0 -25
  210. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/LICENSE +0 -20
  211. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/README.md +0 -46
  212. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/crack.gemspec +0 -20
  213. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/lib/crack/version.rb +0 -3
  214. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/script/bootstrap +0 -21
  215. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/script/release +0 -42
  216. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/script/test +0 -25
  217. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/test/data/large_dataset.json +0 -139988
  218. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/test/data/twittersearch-firefox.json +0 -1
  219. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/test/data/twittersearch-ie.json +0 -1
  220. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/test/hash_test.rb +0 -26
  221. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/test/json_test.rb +0 -91
  222. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/test/parser_test.rb +0 -27
  223. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/test/string_test.rb +0 -31
  224. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/test/test_helper.rb +0 -3
  225. data/vendor/bundle/ruby/2.6.0/gems/crack-0.4.3/test/xml_test.rb +0 -514
  226. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/.gitignore +0 -3
  227. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/.travis.yml +0 -48
  228. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/CHANGES.md +0 -154
  229. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/Gemfile +0 -11
  230. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/LICENSE.txt +0 -22
  231. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/README.md +0 -191
  232. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/Rakefile +0 -26
  233. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/bin/safe_yaml +0 -75
  234. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/bundle_install_all_ruby_versions.sh +0 -11
  235. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml.rb +0 -94
  236. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/deep.rb +0 -34
  237. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/libyaml_checker.rb +0 -36
  238. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/load.rb +0 -181
  239. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/parse/date.rb +0 -37
  240. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/parse/hexadecimal.rb +0 -12
  241. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/parse/sexagesimal.rb +0 -26
  242. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/psych_handler.rb +0 -99
  243. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/psych_resolver.rb +0 -52
  244. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/resolver.rb +0 -94
  245. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/safe_to_ruby_visitor.rb +0 -29
  246. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/store.rb +0 -39
  247. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/syck_hack.rb +0 -36
  248. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/syck_node_monkeypatch.rb +0 -43
  249. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/syck_resolver.rb +0 -38
  250. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/transform.rb +0 -41
  251. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/transform/to_boolean.rb +0 -21
  252. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/transform/to_date.rb +0 -13
  253. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/transform/to_float.rb +0 -33
  254. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/transform/to_integer.rb +0 -26
  255. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/transform/to_nil.rb +0 -18
  256. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/transform/to_symbol.rb +0 -17
  257. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/transform/transformation_map.rb +0 -47
  258. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/lib/safe_yaml/version.rb +0 -3
  259. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/run_specs_all_ruby_versions.sh +0 -38
  260. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/safe_yaml.gemspec +0 -19
  261. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/exploit.1.9.2.yaml +0 -2
  262. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/exploit.1.9.3.yaml +0 -2
  263. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/issue48.txt +0 -20
  264. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/issue49.yml +0 -0
  265. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/libyaml_checker_spec.rb +0 -69
  266. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/psych_resolver_spec.rb +0 -10
  267. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/resolver_specs.rb +0 -278
  268. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/safe_yaml_spec.rb +0 -731
  269. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/spec_helper.rb +0 -42
  270. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/store_spec.rb +0 -57
  271. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/support/exploitable_back_door.rb +0 -29
  272. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/syck_resolver_spec.rb +0 -10
  273. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/transform/base64_spec.rb +0 -11
  274. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/transform/to_date_spec.rb +0 -60
  275. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/transform/to_float_spec.rb +0 -42
  276. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/transform/to_integer_spec.rb +0 -64
  277. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/transform/to_symbol_spec.rb +0 -51
  278. data/vendor/bundle/ruby/2.6.0/gems/safe_yaml-1.0.5/spec/yaml_spec.rb +0 -15
  279. data/vendor/bundle/ruby/2.6.0/specifications/safe_yaml-1.0.5.gemspec +0 -23
@@ -1,3 +0,0 @@
1
- *.gem
2
- Gemfile.lock
3
- spec/store.yaml
@@ -1,48 +0,0 @@
1
- language:
2
- ruby
3
-
4
- before_install:
5
- gem install bundler
6
-
7
- script:
8
- bundle exec rake spec
9
-
10
- rvm:
11
- - ruby-head
12
- - 2.0.0
13
- - 1.9.3
14
- - 1.9.2
15
- - 1.8.7
16
- - rbx-19mode
17
- - rbx-18mode
18
- - jruby-head
19
- - jruby-19mode
20
- - jruby-18mode
21
- - ree
22
-
23
- env:
24
- - YAMLER=syck
25
- - YAMLER=psych
26
-
27
- matrix:
28
- allow_failures:
29
- - rvm: ruby-head
30
- - rvm: rbx-19mode
31
- - rvm: rbx-18mode
32
- - rvm: jruby-head
33
- - rvm: ree
34
-
35
- exclude:
36
- - rvm: 1.8.7
37
- env: YAMLER=psych
38
- - rvm: jruby-head
39
- env: YAMLER=syck
40
- - rvm: jruby-19mode
41
- env: YAMLER=syck
42
- - rvm: jruby-18mode
43
- env: YAMLER=syck
44
-
45
- branches:
46
- only:
47
- - master
48
-
@@ -1,154 +0,0 @@
1
- 1.0.5
2
- -----
3
-
4
- - fixed [#80](https://github.com/dtao/safe_yaml/issues/80): uninitialized constant DateTime
5
-
6
- 1.0.2
7
- -----
8
-
9
- - added warning when using Psych + an older version of libyaml
10
-
11
- 1.0.1
12
- -----
13
-
14
- - fixed handling for strings that look like (invalid) dates
15
-
16
- 1.0.0
17
- -----
18
-
19
- - updated date parsing to use local timezone
20
- - **now requiring "safe_yaml/load" provides `SafeYAML.load` without clobbering `YAML`**
21
- - fixed handling of empty files
22
- - fixed some (edge case) integer parsing bugs
23
- - fixed some JRuby-specific issues
24
-
25
- 0.9.7
26
- -----
27
-
28
- - made handling of document frontmatter more robust
29
- - added more descriptive message to the warning for omitting the :safe option
30
-
31
- 0.9.6
32
- -----
33
-
34
- - fixed handling of files with trailing content (after closing `---`)
35
-
36
- 0.9.5
37
- -----
38
-
39
- - fixed permissions AGAIN
40
-
41
- 0.9.4
42
- -----
43
-
44
- - corrected handling of symbols
45
-
46
- 0.9.3
47
- -----
48
-
49
- - fixed permissions :(
50
-
51
- 0.9.2
52
- -----
53
-
54
- - fixed error w/ parsing "!" when whitelisting tags
55
- - fixed parsing of the number 0 (d'oh!)
56
-
57
- 0.9.1
58
- -----
59
-
60
- - added Yecht support (JRuby)
61
- - more bug fixes
62
-
63
- 0.9.0
64
- -----
65
-
66
- - added `whitelist!` method for easily whitelisting tags
67
- - added support for call-specific options
68
- - removed deprecated methods
69
-
70
- 0.8.6
71
- -----
72
-
73
- - fixed bug in float matcher
74
-
75
- 0.8.5
76
- -----
77
-
78
- - performance improvements
79
- - made less verbose by default
80
- - bug fixes
81
-
82
- 0.8.4
83
- -----
84
-
85
- - enhancements to parsing of integers, floats, and dates
86
- - updated built-in whitelist
87
- - more bug fixes
88
-
89
- 0.8.3
90
- -----
91
-
92
- - fixed exception on parsing empty document
93
- - fixed handling of octal & hexadecimal numbers
94
-
95
- 0.8.2
96
- -----
97
-
98
- - bug fixes
99
-
100
- 0.8.1
101
- -----
102
-
103
- - added `:raise_on_unknown_tag` option
104
- - renamed `reset_defaults!` to `restore_defaults!`
105
-
106
- 0.8
107
- ---
108
-
109
- - added tag whitelisting
110
- - more API changes
111
-
112
- 0.7
113
- ---
114
-
115
- - separated YAML engine support from Ruby version
116
- - added support for binary scalars
117
- - numerous bug fixes and enhancements
118
-
119
- 0.6
120
- ---
121
-
122
- - several API changes
123
- - added `SafeYAML::OPTIONS` for specifying default behavior
124
-
125
- 0.5
126
- ---
127
-
128
- Added support for dates
129
-
130
- 0.4
131
- ---
132
-
133
- - efficiency improvements
134
- - made `YAML.load` use `YAML.safe_load` by default
135
- - made symbol deserialization optional
136
-
137
- 0.3
138
- ---
139
-
140
- Added Syck support
141
-
142
- 0.2
143
- ---
144
-
145
- Added support for:
146
-
147
- - anchors & aliases
148
- - booleans
149
- - nils
150
-
151
- 0.1
152
- ---
153
-
154
- Initial release
@@ -1,11 +0,0 @@
1
- source "https://rubygems.org"
2
-
3
- gemspec
4
-
5
- group :development do
6
- gem "hashie"
7
- gem "heredoc_unindent"
8
- gem "rake"
9
- gem "rspec"
10
- gem "travis-lint"
11
- end
@@ -1,22 +0,0 @@
1
- Copyright (c) 2013 Dan Tao
2
-
3
- MIT License
4
-
5
- Permission is hereby granted, free of charge, to any person obtaining
6
- a copy of this software and associated documentation files (the
7
- "Software"), to deal in the Software without restriction, including
8
- without limitation the rights to use, copy, modify, merge, publish,
9
- distribute, sublicense, and/or sell copies of the Software, and to
10
- permit persons to whom the Software is furnished to do so, subject to
11
- the following conditions:
12
-
13
- The above copyright notice and this permission notice shall be
14
- included in all copies or substantial portions of the Software.
15
-
16
- THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
17
- EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
18
- MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
19
- NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
20
- LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
21
- OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
22
- WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
@@ -1,191 +0,0 @@
1
- SafeYAML
2
- ========
3
-
4
- [![Build Status](https://travis-ci.org/dtao/safe_yaml.png)](http://travis-ci.org/dtao/safe_yaml)
5
- [![Gem Version](https://badge.fury.io/rb/safe_yaml.png)](http://badge.fury.io/rb/safe_yaml)
6
-
7
- The **SafeYAML** gem provides an alternative implementation of `YAML.load` suitable for accepting user input in Ruby applications. Unlike Ruby's built-in implementation of `YAML.load`, SafeYAML's version will not expose apps to arbitrary code execution exploits (such as [the ones discovered](http://www.reddit.com/r/netsec/comments/167c11/serious_vulnerability_in_ruby_on_rails_allowing/) [in Rails in early 2013](http://www.h-online.com/open/news/item/Rails-developers-close-another-extremely-critical-flaw-1793511.html)).
8
-
9
- **If you encounter any issues with SafeYAML, check out the 'Common Issues' section below.** If you don't see anything that addresses the problem you're experiencing, by all means, [create an issue](https://github.com/dtao/safe_yaml/issues/new)!
10
-
11
- Installation
12
- ------------
13
-
14
- Add this line to your application's Gemfile:
15
-
16
- ```ruby
17
- gem "safe_yaml"
18
- ```
19
-
20
- Configuration
21
- -------------
22
-
23
- If *all you do* is add SafeYAML to your project, then `YAML.load` will operate in "safe" mode, which means it won't deserialize arbitrary objects. However, it will issue a warning the first time you call it because you haven't explicitly specified whether you want safe or unsafe behavior by default. To specify this behavior (e.g., in a Rails initializer):
24
-
25
- ```ruby
26
- SafeYAML::OPTIONS[:default_mode] = :safe # or :unsafe
27
- ```
28
-
29
- Another important option you might want to specify on startup is whether or not to allow *symbols* to be deserialized. The default setting is `false`, since symbols are not garbage collected in Ruby and so deserializing them from YAML may render your application vulnerable to a DOS (denial of service) attack. To allow symbol deserialization by default:
30
-
31
- ```ruby
32
- SafeYAML::OPTIONS[:deserialize_symbols] = true
33
- ```
34
-
35
- For more information on these and other options, see the "Usage" section down below.
36
-
37
- What is this gem for, exactly?
38
- ------------------------------
39
-
40
- Suppose your application were to use a popular open source library which contained code like this:
41
-
42
- ```ruby
43
- class ClassBuilder
44
- def []=(key, value)
45
- @class ||= Class.new
46
-
47
- @class.class_eval <<-EOS
48
- def #{key}
49
- #{value}
50
- end
51
- EOS
52
- end
53
-
54
- def create
55
- @class.new
56
- end
57
- end
58
- ```
59
-
60
- Now, if you were to use `YAML.load` on user input anywhere in your application without the SafeYAML gem installed, an attacker who suspected you were using this library could send a request with a carefully-crafted YAML string to execute arbitrary code (yes, including `system("unix command")`) on your servers.
61
-
62
- This simple example demonstrates the vulnerability:
63
-
64
- ```ruby
65
- yaml = <<-EOYAML
66
- --- !ruby/hash:ClassBuilder
67
- "foo; end; puts %(I'm in yr system!); def bar": "baz"
68
- EOYAML
69
- ```
70
-
71
- > YAML.load(yaml)
72
- I'm in yr system!
73
- => #<ClassBuilder:0x007fdbbe2e25d8 @class=#<Class:0x007fdbbe2e2510>>
74
-
75
- With SafeYAML, the same attacker would be thwarted:
76
-
77
- > require "safe_yaml"
78
- => true
79
- > YAML.load(yaml, :safe => true)
80
- => {"foo; end; puts %(I'm in yr system!); def bar"=>"baz"}
81
-
82
- Usage
83
- -----
84
-
85
- When you require the safe_yaml gem in your project, `YAML.load` is patched to accept one additional (optional) `options` parameter. This changes the method signature as follows:
86
-
87
- - for Syck and Psych prior to Ruby 1.9.3: `YAML.load(yaml, options={})`
88
- - for Psych in 1.9.3 and later: `YAML.load(yaml, filename=nil, options={})`
89
-
90
- The most important option is the `:safe` option (default: `true`), which controls whether or not to deserialize arbitrary objects when parsing a YAML document. The other options, along with explanations, are as follows.
91
-
92
- - `:deserialize_symbols` (default: `false`): Controls whether or not YAML will deserialize symbols. It is probably best to only enable this option where necessary, e.g. to make trusted libraries work. Symbols receive special treatment in Ruby and are not garbage collected, which means deserializing them indiscriminately may render your site vulnerable to a DOS attack.
93
-
94
- - `:whitelisted_tags`: Accepts an array of YAML tags that designate trusted types, e.g., ones that can be deserialized without worrying about any resulting security vulnerabilities. When any of the given tags are encountered in a YAML document, the associated data will be parsed by the underlying YAML engine (Syck or Psych) for the version of Ruby you are using. See the "Whitelisting Trusted Types" section below for more information.
95
-
96
- - `:custom_initializers`: Similar to the `:whitelisted_tags` option, but allows you to provide your own initializers for specified tags rather than using Syck or Psyck. Accepts a hash with string tags for keys and lambdas for values.
97
-
98
- - `:raise_on_unknown_tag` (default: `false`): Represents the highest possible level of paranoia. If the YAML engine encounters any tag other than ones that are automatically trusted by SafeYAML or that you've explicitly whitelisted, it will raise an exception. This may be a good choice if you expect to always be dealing with perfectly safe YAML and want your application to fail loudly upon encountering questionable data.
99
-
100
- All of the above options can be set at the global level via `SafeYAML::OPTIONS`. You can also set each one individually per call to `YAML.load`; an option explicitly passed to `load` will take precedence over an option specified globally.
101
-
102
- What if I don't *want* to patch `YAML`?
103
- ---------------------------------------
104
-
105
- [Excellent question](https://github.com/dtao/safe_yaml/issues/47)! You can also get the methods `SafeYAML.load` and `SafeYAML.load_file` without touching the `YAML` module at all like this:
106
-
107
- ```ruby
108
- require "safe_yaml/load" # instead of require "safe_yaml"
109
- ```
110
-
111
- This way, you can use `SafeYAML.load` to parse YAML that *you* don't trust, without affecting the rest of an application (if you're developing a library, for example).
112
-
113
- Supported Types
114
- ---------------
115
-
116
- The way that SafeYAML works is by restricting the kinds of objects that can be deserialized via `YAML.load`. More specifically, only the following types of objects can be deserialized by default:
117
-
118
- - Hashes
119
- - Arrays
120
- - Strings
121
- - Numbers
122
- - Dates
123
- - Times
124
- - Booleans
125
- - Nils
126
-
127
- Again, deserialization of symbols can be enabled globally by setting `SafeYAML::OPTIONS[:deserialize_symbols] = true`, or in a specific call to `YAML.load([some yaml], :deserialize_symbols => true)`.
128
-
129
- Whitelisting Trusted Types
130
- --------------------------
131
-
132
- SafeYAML supports whitelisting certain YAML tags for trusted types. This is handy when your application uses YAML to serialize and deserialize certain types not listed above, which you know to be free of any deserialization-related vulnerabilities.
133
-
134
- The easiest way to whitelist types is by calling `SafeYAML.whitelist!`, which can accept a variable number of safe types, e.g.:
135
-
136
- ```ruby
137
- SafeYAML.whitelist!(Foo, Bar)
138
- ```
139
-
140
- You can also whitelist YAML *tags* via the `:whitelisted_tags` option:
141
-
142
- ```ruby
143
- # Using Syck
144
- SafeYAML::OPTIONS[:whitelisted_tags] = ["tag:ruby.yaml.org,2002:object:OpenStruct"]
145
-
146
- # Using Psych
147
- SafeYAML::OPTIONS[:whitelisted_tags] = ["!ruby/object:OpenStruct"]
148
- ```
149
-
150
- And in case you were wondering: no, this feature will *not* allow would-be attackers to embed untrusted types within trusted types:
151
-
152
- ```ruby
153
- yaml = <<-EOYAML
154
- --- !ruby/object:OpenStruct
155
- table:
156
- :backdoor: !ruby/hash:ClassBuilder
157
- "foo; end; puts %(I'm in yr system!); def bar": "baz"
158
- EOYAML
159
- ```
160
-
161
- > YAML.safe_load(yaml)
162
- => #<OpenStruct :backdoor={"foo; end; puts %(I'm in yr system!); def bar"=>"baz"}>
163
-
164
- Known Issues
165
- ------------
166
-
167
- If you add SafeYAML to your project and start seeing any errors about missing keys, or you notice mysterious strings that look like `":foo"` (i.e., start with a colon), it's likely you're seeing errors from symbols being saved in YAML format. If you are able to modify the offending code, you might want to consider changing your YAML content to use plain vanilla strings instead of symbols. If not, you may need to set the `:deserialize_symbols` option to `true`, either in calls to `YAML.load` or---as a last resort---globally, with `SafeYAML::OPTIONS[:deserialize_symbols]`.
168
-
169
- Also be aware that some Ruby libraries, particularly those requiring inter-process communication, leverage YAML's object deserialization functionality and therefore may break or otherwise be impacted by SafeYAML. The following list includes known instances of SafeYAML's interaction with other Ruby gems:
170
-
171
- - [**ActiveRecord**](https://github.com/rails/rails/tree/master/activerecord): uses YAML to control serialization of model objects using the `serialize` class method. If you find that accessing serialized properties on your ActiveRecord models is causing errors, chances are you may need to:
172
- 1. set the `:deserialize_symbols` option to `true`,
173
- 2. whitelist some of the types in your serialized data via `SafeYAML.whitelist!` or the `:whitelisted_tags` option, or
174
- 3. both
175
- - [**delayed_job**](https://github.com/collectiveidea/delayed_job): Uses YAML to serialize the objects on which delayed methods are invoked (with `delay`). The safest solution in this case is to use `SafeYAML.whitelist!` to whitelist the types you need to serialize.
176
- - [**Guard**](https://github.com/guard/guard): Uses YAML as a serialization format for notifications. The data serialized uses symbolic keys, so setting `SafeYAML::OPTIONS[:deserialize_symbols] = true` is necessary to allow Guard to work.
177
- - [**sidekiq**](https://github.com/mperham/sidekiq): Uses a YAML configiuration file with symbolic keys, so setting `SafeYAML::OPTIONS[:deserialize_symbols] = true` should allow it to work.
178
-
179
- The above list will grow over time, as more issues are discovered.
180
-
181
- Versioning
182
- ----------
183
-
184
- SafeYAML will follow [semantic versioning](http://semver.org/) so any updates to the first major version will maintain backwards compatability. So expect primarily bug fixes and feature enhancements (if anything!) from here on out... unless it makes sense to break the interface at some point and introduce a version 2.0, which I honestly think is unlikely.
185
-
186
- Requirements
187
- ------------
188
-
189
- SafeYAML requires Ruby 1.8.7 or newer and works with both [Syck](http://www.ruby-doc.org/stdlib-1.8.7/libdoc/yaml/rdoc/YAML.html) and [Psych](http://github.com/tenderlove/psych).
190
-
191
- If you are using a version of Ruby where Psych is the default YAML engine (e.g., 1.9.3) but you want to use Syck, be sure to set `YAML::ENGINE.yamler = "syck"` **before** requiring the safe_yaml gem.
@@ -1,26 +0,0 @@
1
- require "rspec/core/rake_task"
2
-
3
- desc "Run specs"
4
- task :spec => ['spec:app', 'spec:lib']
5
-
6
- namespace :spec do
7
- desc "Run only specs tagged 'solo'"
8
- RSpec::Core::RakeTask.new(:solo) do |t|
9
- t.verbose = false
10
- t.rspec_opts = %w(--color --tag solo)
11
- end
12
-
13
- desc "Run only specs tagged NOT tagged 'libraries' (for applications)"
14
- RSpec::Core::RakeTask.new(:app) do |t|
15
- t.verbose = false
16
- ENV["MONKEYPATCH_YAML"] = "true"
17
- t.rspec_opts = %w(--color --tag ~libraries)
18
- end
19
-
20
- desc "Run only specs tagged 'libraries'"
21
- RSpec::Core::RakeTask.new(:lib) do |t|
22
- t.verbose = false
23
- ENV["MONKEYPATCH_YAML"] = "false"
24
- t.rspec_opts = %w(--color --tag libraries)
25
- end
26
- end