contrast-agent 3.9.0 → 3.11.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.simplecov +5 -2
- data/ext/build_funchook.rb +14 -9
- data/ext/cs__assess_active_record_named/cs__active_record_named.c +5 -12
- data/ext/cs__assess_active_record_named/extconf.rb +3 -0
- data/ext/cs__assess_array/cs__assess_array.c +3 -5
- data/ext/cs__assess_array/extconf.rb +3 -0
- data/ext/cs__assess_basic_object/cs__assess_basic_object.c +10 -4
- data/ext/cs__assess_basic_object/extconf.rb +3 -0
- data/ext/cs__assess_fiber_track/cs__assess_fiber_track.c +4 -3
- data/ext/cs__assess_fiber_track/cs__assess_fiber_track.h +3 -3
- data/ext/cs__assess_fiber_track/extconf.rb +3 -0
- data/ext/cs__assess_hash/cs__assess_hash.c +40 -17
- data/ext/cs__assess_hash/cs__assess_hash.h +4 -6
- data/ext/cs__assess_hash/extconf.rb +3 -0
- data/ext/cs__assess_kernel/cs__assess_kernel.c +10 -8
- data/ext/cs__assess_kernel/cs__assess_kernel.h +1 -0
- data/ext/cs__assess_kernel/extconf.rb +3 -0
- data/ext/cs__assess_marshal_module/cs__assess_marshal_module.c +3 -6
- data/ext/cs__assess_marshal_module/extconf.rb +3 -0
- data/ext/cs__assess_module/cs__assess_module.c +13 -9
- data/ext/cs__assess_module/extconf.rb +3 -0
- data/ext/cs__assess_regexp/cs__assess_regexp.c +13 -9
- data/ext/cs__assess_regexp/cs__assess_regexp.h +1 -0
- data/ext/cs__assess_regexp/extconf.rb +3 -0
- data/ext/cs__assess_string/cs__assess_string.c +5 -8
- data/ext/cs__assess_string/cs__assess_string.h +2 -1
- data/ext/cs__assess_string/extconf.rb +3 -0
- data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.c +2 -2
- data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.h +3 -3
- data/ext/cs__assess_string_interpolation26/extconf.rb +3 -0
- data/ext/cs__assess_yield_track/cs__assess_yield_track.h +1 -1
- data/ext/cs__assess_yield_track/extconf.rb +3 -0
- data/ext/cs__common/cs__common.c +79 -0
- data/ext/cs__common/cs__common.h +34 -0
- data/ext/cs__common/extconf.rb +9 -8
- data/ext/cs__contrast_patch/cs__contrast_patch.h +1 -6
- data/ext/cs__contrast_patch/extconf.rb +3 -0
- data/ext/cs__protect_kernel/cs__protect_kernel.c +20 -11
- data/ext/cs__protect_kernel/extconf.rb +3 -0
- data/ext/extconf_common.rb +10 -8
- data/funchook/autom4te.cache/output.0 +1 -13
- data/funchook/autom4te.cache/requests +44 -45
- data/funchook/autom4te.cache/traces.0 +0 -3
- data/funchook/config.log +378 -217
- data/funchook/config.status +23 -24
- data/funchook/configure +1 -13
- data/funchook/src/Makefile +7 -7
- data/funchook/src/config.h +2 -2
- data/funchook/src/decoder.o +0 -0
- data/funchook/src/distorm.o +0 -0
- data/funchook/src/funchook.o +0 -0
- data/funchook/src/funchook_io.o +0 -0
- data/funchook/src/funchook_syscall.o +0 -0
- data/funchook/src/funchook_unix.o +0 -0
- data/funchook/src/funchook_x86.o +0 -0
- data/funchook/src/instructions.o +0 -0
- data/funchook/src/insts.o +0 -0
- data/funchook/src/libfunchook.dylib +0 -0
- data/funchook/src/mnemonics.o +0 -0
- data/funchook/src/operands.o +0 -0
- data/funchook/src/os_func.o +0 -0
- data/funchook/src/os_func_unix.o +0 -0
- data/funchook/src/prefix.o +0 -0
- data/funchook/src/printf_base.o +0 -0
- data/funchook/src/textdefs.o +0 -0
- data/funchook/src/wstring.o +0 -0
- data/funchook/test/Makefile +2 -2
- data/funchook/test/funchook_test +0 -0
- data/funchook/test/libfunchook_test.so +0 -0
- data/funchook/test/libfunchook_test.so.dSYM/Contents/Info.plist +20 -0
- data/funchook/test/libfunchook_test.so.dSYM/Contents/Resources/DWARF/libfunchook_test.so +0 -0
- data/funchook/test/test_main.o +0 -0
- data/funchook/test/x86_64_test.o +0 -0
- data/lib/contrast.rb +1 -0
- data/lib/contrast/agent.rb +21 -15
- data/lib/contrast/agent/assess.rb +1 -2
- data/lib/contrast/agent/assess/adjusted_span.rb +3 -1
- data/lib/contrast/agent/assess/contrast_event.rb +20 -68
- data/lib/contrast/agent/assess/events/event_factory.rb +25 -0
- data/lib/contrast/agent/assess/events/source_event.rb +83 -0
- data/lib/contrast/agent/assess/insulator.rb +0 -4
- data/lib/contrast/agent/assess/policy/patcher.rb +5 -2
- data/lib/contrast/agent/assess/policy/policy_node.rb +0 -7
- data/lib/contrast/agent/assess/policy/policy_scanner.rb +1 -1
- data/lib/contrast/agent/assess/policy/preshift.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagation_method.rb +65 -33
- data/lib/contrast/agent/assess/policy/propagation_node.rb +2 -1
- data/lib/contrast/agent/assess/policy/propagator.rb +1 -0
- data/lib/contrast/agent/assess/policy/propagator/match_data.rb +80 -0
- data/lib/contrast/agent/assess/policy/propagator/select.rb +35 -22
- data/lib/contrast/agent/assess/policy/propagator/split.rb +26 -6
- data/lib/contrast/agent/assess/policy/propagator/substitution.rb +2 -0
- data/lib/contrast/agent/assess/policy/rewriter_patch.rb +40 -27
- data/lib/contrast/agent/assess/policy/source_method.rb +20 -20
- data/lib/contrast/agent/assess/policy/source_node.rb +0 -15
- data/lib/contrast/agent/assess/policy/trigger_method.rb +29 -40
- data/lib/contrast/agent/assess/policy/trigger_node.rb +3 -6
- data/lib/contrast/agent/assess/policy/trigger_validation/ssrf_validator.rb +2 -31
- data/lib/contrast/agent/assess/properties.rb +5 -3
- data/lib/contrast/agent/assess/rule/base.rb +1 -5
- data/lib/contrast/agent/assess/rule/csrf/csrf_applicator.rb +2 -22
- data/lib/contrast/agent/assess/rule/csrf/csrf_watcher.rb +5 -1
- data/lib/contrast/agent/assess/rule/provider/hardcoded_value_rule.rb +2 -2
- data/lib/contrast/agent/assess/rule/redos.rb +4 -4
- data/lib/contrast/agent/assess/tag.rb +24 -14
- data/lib/contrast/agent/at_exit_hook.rb +16 -13
- data/lib/contrast/agent/class_reopener.rb +15 -6
- data/lib/contrast/agent/deadzone/policy/policy.rb +2 -2
- data/lib/contrast/agent/disable_reaction.rb +3 -4
- data/lib/contrast/agent/exclusion_matcher.rb +8 -48
- data/lib/contrast/agent/feature_state.rb +45 -78
- data/lib/contrast/agent/logger.rb +173 -0
- data/lib/contrast/agent/middleware.rb +87 -250
- data/lib/contrast/agent/module_data.rb +2 -1
- data/lib/contrast/agent/patching/policy/after_load_patch.rb +2 -1
- data/lib/contrast/agent/patching/policy/after_load_patcher.rb +21 -4
- data/lib/contrast/agent/patching/policy/method_policy.rb +3 -3
- data/lib/contrast/agent/patching/policy/module_policy.rb +0 -25
- data/lib/contrast/agent/patching/policy/patch.rb +96 -23
- data/lib/contrast/agent/patching/policy/patcher.rb +19 -19
- data/lib/contrast/agent/patching/policy/policy.rb +7 -7
- data/lib/contrast/agent/patching/policy/policy_node.rb +2 -10
- data/lib/contrast/agent/patching/policy/trigger_node.rb +1 -4
- data/lib/contrast/agent/protect/rule/base.rb +14 -33
- data/lib/contrast/agent/protect/rule/base_service.rb +3 -1
- data/lib/contrast/agent/protect/rule/cmd_injection.rb +10 -13
- data/lib/contrast/agent/protect/rule/csrf.rb +2 -1
- data/lib/contrast/agent/protect/rule/csrf/csrf_evaluator.rb +11 -14
- data/lib/contrast/agent/protect/rule/default_scanner.rb +0 -13
- data/lib/contrast/agent/protect/rule/deserialization.rb +2 -0
- data/lib/contrast/agent/protect/rule/http_method_tampering.rb +2 -2
- data/lib/contrast/agent/protect/rule/no_sqli.rb +4 -4
- data/lib/contrast/agent/protect/rule/path_traversal.rb +5 -4
- data/lib/contrast/agent/protect/rule/sqli.rb +1 -0
- data/lib/contrast/agent/protect/rule/unsafe_file_upload.rb +2 -0
- data/lib/contrast/agent/protect/rule/xss.rb +2 -0
- data/lib/contrast/agent/protect/rule/xxe.rb +10 -4
- data/lib/contrast/agent/railtie.rb +2 -8
- data/lib/contrast/agent/reaction_processor.rb +5 -5
- data/lib/contrast/agent/request.rb +9 -12
- data/lib/contrast/agent/request_context.rb +12 -14
- data/lib/contrast/agent/request_handler.rb +35 -0
- data/lib/contrast/agent/response.rb +52 -30
- data/lib/contrast/agent/rewriter.rb +25 -11
- data/lib/contrast/agent/rule_set.rb +49 -0
- data/lib/contrast/agent/scope.rb +4 -12
- data/lib/contrast/agent/service_heartbeat.rb +1 -2
- data/lib/contrast/agent/settings_state.rb +10 -74
- data/lib/contrast/agent/socket_client.rb +17 -11
- data/lib/contrast/agent/static_analysis.rb +42 -0
- data/lib/contrast/agent/thread.rb +1 -1
- data/lib/contrast/agent/tracepoint_hook.rb +1 -5
- data/lib/contrast/agent/version.rb +1 -1
- data/lib/contrast/api.rb +1 -1
- data/lib/contrast/api/decorators.rb +14 -0
- data/lib/contrast/api/decorators/application_settings.rb +37 -0
- data/lib/contrast/api/decorators/application_update.rb +66 -0
- data/lib/contrast/api/decorators/exclusion.rb +20 -0
- data/lib/contrast/api/decorators/input_analysis.rb +17 -0
- data/lib/contrast/api/decorators/server_features.rb +24 -0
- data/lib/contrast/api/speedracer.rb +31 -29
- data/lib/contrast/api/tcp_socket.rb +0 -2
- data/lib/contrast/components/agent.rb +27 -22
- data/lib/contrast/components/app_context.rb +18 -43
- data/lib/contrast/components/config.rb +7 -5
- data/lib/contrast/components/contrast_service.rb +0 -4
- data/lib/contrast/components/heap_dump.rb +12 -8
- data/lib/contrast/components/interface.rb +11 -10
- data/lib/contrast/components/logger.rb +3 -68
- data/lib/contrast/components/sampling.rb +22 -11
- data/lib/contrast/components/settings.rb +18 -5
- data/lib/contrast/config/base_configuration.rb +1 -0
- data/lib/contrast/config/default_value.rb +1 -0
- data/lib/contrast/config/protect_rule_configuration.rb +0 -14
- data/lib/contrast/configuration.rb +3 -5
- data/lib/contrast/extensions/framework/rails/action_controller_inheritance.rb +39 -0
- data/lib/contrast/extensions/framework/rails/active_record_named.rb +13 -8
- data/lib/contrast/extensions/ruby_core/assess.rb +1 -2
- data/lib/contrast/extensions/ruby_core/assess/assess_extension.rb +27 -22
- data/lib/contrast/extensions/ruby_core/assess/erb.rb +0 -8
- data/lib/contrast/extensions/ruby_core/assess/exec_trigger.rb +6 -8
- data/lib/contrast/extensions/ruby_core/assess/fiber.rb +88 -100
- data/lib/contrast/extensions/ruby_core/assess/hash.rb +32 -15
- data/lib/contrast/extensions/ruby_core/assess/kernel.rb +28 -27
- data/lib/contrast/extensions/ruby_core/assess/regexp.rb +74 -196
- data/lib/contrast/extensions/ruby_core/assess/string.rb +15 -7
- data/lib/contrast/extensions/ruby_core/assess/tilt_template_trigger.rb +29 -24
- data/lib/contrast/extensions/ruby_core/assess/xpath_library_trigger.rb +2 -2
- data/lib/contrast/extensions/ruby_core/eval_trigger.rb +0 -1
- data/lib/contrast/extensions/ruby_core/inventory/datastores.rb +2 -2
- data/lib/contrast/extensions/ruby_core/protect/applies_command_injection_rule.rb +9 -20
- data/lib/contrast/extensions/ruby_core/protect/applies_deserialization_rule.rb +9 -19
- data/lib/contrast/extensions/ruby_core/protect/applies_no_sqli_rule.rb +10 -27
- data/lib/contrast/extensions/ruby_core/protect/applies_path_traversal_rule.rb +13 -21
- data/lib/contrast/extensions/ruby_core/protect/applies_sqli_rule.rb +11 -23
- data/lib/contrast/extensions/ruby_core/protect/applies_xxe_rule.rb +62 -78
- data/lib/contrast/extensions/ruby_core/protect/rule_applicator.rb +50 -0
- data/lib/contrast/framework/base_support.rb +10 -0
- data/lib/contrast/framework/manager.rb +28 -2
- data/lib/contrast/framework/platform_version.rb +1 -0
- data/lib/contrast/framework/rails_support.rb +16 -0
- data/lib/contrast/framework/sinatra_support.rb +12 -2
- data/lib/contrast/framework/view_technologies_descriptor.rb +1 -0
- data/lib/contrast/tasks/service.rb +2 -8
- data/lib/contrast/utils/assess/sampling_util.rb +4 -9
- data/lib/contrast/utils/assess/tracking_util.rb +7 -1
- data/lib/contrast/utils/boolean_util.rb +2 -5
- data/lib/contrast/utils/cache.rb +0 -11
- data/lib/contrast/utils/class_util.rb +20 -1
- data/lib/contrast/utils/gemfile_reader.rb +5 -3
- data/lib/contrast/utils/hash_digest.rb +0 -4
- data/lib/contrast/utils/heap_dump_util.rb +12 -11
- data/lib/contrast/utils/invalid_configuration_util.rb +1 -1
- data/lib/contrast/utils/inventory_util.rb +2 -2
- data/lib/contrast/utils/io_util.rb +1 -11
- data/lib/contrast/utils/job_servers_running.rb +2 -2
- data/lib/contrast/utils/object_share.rb +1 -37
- data/lib/contrast/utils/os.rb +1 -25
- data/lib/contrast/utils/rack_assess_session_cookie.rb +3 -3
- data/lib/contrast/utils/rails_assess_configuration.rb +3 -3
- data/lib/contrast/utils/ruby_ast_rewriter.rb +5 -1
- data/lib/contrast/utils/service_response_util.rb +27 -53
- data/lib/contrast/utils/service_sender_util.rb +9 -5
- data/lib/contrast/utils/sinatra_helper.rb +0 -6
- data/lib/contrast/utils/stack_trace_utils.rb +86 -182
- data/lib/contrast/utils/string_utils.rb +18 -2
- data/lib/contrast/utils/tag_util.rb +11 -1
- data/lib/contrast/utils/thread_tracker.rb +2 -2
- data/lib/contrast/utils/timer.rb +0 -40
- data/resources/assess/policy.json +33 -21
- data/resources/protect/policy.json +9 -9
- data/ruby-agent.gemspec +7 -4
- data/service_executables/VERSION +1 -1
- data/service_executables/linux/contrast-service +0 -0
- data/service_executables/mac/contrast-service +0 -0
- metadata +79 -54
- data/ext/cs__assess_regexp_track/cs__assess_regexp_track.c +0 -63
- data/ext/cs__assess_regexp_track/cs__assess_regexp_track.h +0 -29
- data/ext/cs__assess_regexp_track/extconf.rb +0 -2
- data/funchook/src/libfunchook.so +0 -0
- data/lib/contrast/agent/assess/frozen_properties.rb +0 -41
- data/lib/contrast/agent/logger_manager.rb +0 -116
- data/lib/contrast/delegators.rb +0 -9
- data/lib/contrast/delegators/application_update.rb +0 -32
- data/lib/contrast/utils/comment_range.rb +0 -19
- data/lib/contrast/utils/environment_util.rb +0 -82
- data/lib/contrast/utils/performs_logging.rb +0 -152
- data/resources/factory-bot-spec/spec_helper.rb +0 -30
- data/resources/rubocops/kernel/catch_cop.rb +0 -37
- data/resources/rubocops/kernel/require_cop.rb +0 -37
- data/resources/rubocops/kernel/require_relative_cop.rb +0 -33
- data/resources/rubocops/module/autoload_cop.rb +0 -37
- data/resources/rubocops/module/const_defined_cop.rb +0 -37
- data/resources/rubocops/module/const_get_cop.rb +0 -37
- data/resources/rubocops/module/const_set_cop.rb +0 -37
- data/resources/rubocops/module/constants_cop.rb +0 -37
- data/resources/rubocops/module/name_cop.rb +0 -37
- data/resources/rubocops/object/class_cop.rb +0 -37
- data/resources/rubocops/object/freeze_cop.rb +0 -37
- data/resources/rubocops/object/frozen_cop.rb +0 -37
- data/resources/rubocops/object/is_a_cop.rb +0 -37
- data/resources/rubocops/object/method_cop.rb +0 -37
- data/resources/rubocops/object/respond_to_cop.rb +0 -37
- data/resources/rubocops/object/singleton_class_cop.rb +0 -37
- data/resources/rubocops/regexp/spelling_cop.rb +0 -44
- data/resources/rubocops/thread/new_cop.rb +0 -39
- data/resources/ruby-spec/ancestors_spec.rb +0 -70
- data/resources/ruby-spec/modulo_spec.rb +0 -831
- data/resources/ruby-spec/parameters_spec.rb +0 -261
- data/resources/ruby-spec/ruby_spec_spec_helper.rb +0 -35
@@ -1,30 +0,0 @@
|
|
1
|
-
require "rspec"
|
2
|
-
require "rspec/its"
|
3
|
-
|
4
|
-
require "simplecov"
|
5
|
-
|
6
|
-
require "factory_bot"
|
7
|
-
require 'contrast-agent'
|
8
|
-
Contrast::Agent::Patching::Policy::Patcher.patch
|
9
|
-
|
10
|
-
Dir["spec/support/**/*.rb"].each { |f| require File.expand_path(f) }
|
11
|
-
|
12
|
-
RSpec.configure do |config|
|
13
|
-
config.mock_with :rspec do |mocks|
|
14
|
-
# Prevents you from mocking or stubbing a method that does not exist on a
|
15
|
-
# real object. This is generally recommended, and will default to `true` in
|
16
|
-
# RSpec 4.
|
17
|
-
mocks.verify_partial_doubles = true
|
18
|
-
end
|
19
|
-
|
20
|
-
config.include DeclarationMatchers
|
21
|
-
|
22
|
-
config.before do
|
23
|
-
FactoryBot.reload
|
24
|
-
end
|
25
|
-
|
26
|
-
config.order = :random
|
27
|
-
Kernel.srand config.seed
|
28
|
-
|
29
|
-
config.example_status_persistence_file_path = "tmp/rspec_examples.txt"
|
30
|
-
end
|
@@ -1,37 +0,0 @@
|
|
1
|
-
# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
-
# frozen_string_literal: true
|
3
|
-
|
4
|
-
module RuboCop
|
5
|
-
module Cop
|
6
|
-
module Security
|
7
|
-
module Kernel
|
8
|
-
# This cop checks for the use of `Kernel.catch`.
|
9
|
-
#
|
10
|
-
# @example
|
11
|
-
#
|
12
|
-
# # bad
|
13
|
-
# Kernel.catch
|
14
|
-
#
|
15
|
-
# # good
|
16
|
-
# Kernel.cs__catch
|
17
|
-
class Catch < Cop
|
18
|
-
MSG = 'The use of `catch` is a compatibility risk.'
|
19
|
-
|
20
|
-
def eligible_node? node
|
21
|
-
node.method?(:catch)
|
22
|
-
end
|
23
|
-
|
24
|
-
def on_send node
|
25
|
-
return false unless eligible_node?(node)
|
26
|
-
|
27
|
-
add_offense(node, location: :selector)
|
28
|
-
end
|
29
|
-
|
30
|
-
def autocorrect node
|
31
|
-
->(corrector) { corrector.replace(node.loc.selector, 'cs__catch') }
|
32
|
-
end
|
33
|
-
end
|
34
|
-
end
|
35
|
-
end
|
36
|
-
end
|
37
|
-
end
|
@@ -1,37 +0,0 @@
|
|
1
|
-
# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
-
# frozen_string_literal: true
|
3
|
-
|
4
|
-
module RuboCop
|
5
|
-
module Cop
|
6
|
-
module Security
|
7
|
-
module Kernel
|
8
|
-
# This cop checks for the use of `Kernel.require`.
|
9
|
-
#
|
10
|
-
# @example
|
11
|
-
#
|
12
|
-
# # bad
|
13
|
-
# Kernel.require
|
14
|
-
#
|
15
|
-
# # good
|
16
|
-
# Kernel.cs__scoped_require
|
17
|
-
class Require < Cop
|
18
|
-
MSG = 'The use of `require` is a scoping risk.'
|
19
|
-
|
20
|
-
def eligible_node? node
|
21
|
-
node.method?(:require)
|
22
|
-
end
|
23
|
-
|
24
|
-
def on_send node
|
25
|
-
return false unless eligible_node?(node)
|
26
|
-
|
27
|
-
add_offense(node, location: :selector)
|
28
|
-
end
|
29
|
-
|
30
|
-
def autocorrect node
|
31
|
-
->(corrector) { corrector.replace(node.loc.selector, 'cs__scoped_require') }
|
32
|
-
end
|
33
|
-
end
|
34
|
-
end
|
35
|
-
end
|
36
|
-
end
|
37
|
-
end
|
@@ -1,33 +0,0 @@
|
|
1
|
-
# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
-
# frozen_string_literal: true
|
3
|
-
|
4
|
-
module RuboCop
|
5
|
-
module Cop
|
6
|
-
module Security
|
7
|
-
module Kernel
|
8
|
-
# This cop checks for the use of `Kernel.require_relative`.
|
9
|
-
#
|
10
|
-
# @example
|
11
|
-
#
|
12
|
-
# # bad
|
13
|
-
# Kernel.require_relative
|
14
|
-
#
|
15
|
-
# # good
|
16
|
-
# Kernel.cs__scoped_require
|
17
|
-
class RequireRelative < Cop
|
18
|
-
MSG = 'The use of `require_relative` is a scoping risk. User `cs__scoped_require` instead'
|
19
|
-
|
20
|
-
def eligible_node? node
|
21
|
-
node.method?(:require_relative)
|
22
|
-
end
|
23
|
-
|
24
|
-
def on_send node
|
25
|
-
return false unless eligible_node?(node)
|
26
|
-
|
27
|
-
add_offense(node, location: :selector)
|
28
|
-
end
|
29
|
-
end
|
30
|
-
end
|
31
|
-
end
|
32
|
-
end
|
33
|
-
end
|
@@ -1,37 +0,0 @@
|
|
1
|
-
# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
-
# frozen_string_literal: true
|
3
|
-
|
4
|
-
module RuboCop
|
5
|
-
module Cop
|
6
|
-
module Security
|
7
|
-
module Module
|
8
|
-
# This cop checks for the use of `Module#autoload?`.
|
9
|
-
#
|
10
|
-
# @example
|
11
|
-
#
|
12
|
-
# # bad
|
13
|
-
# Module.autoload?
|
14
|
-
#
|
15
|
-
# # good
|
16
|
-
# Module.cs__autoload?
|
17
|
-
class Autoload < Cop
|
18
|
-
MSG = 'The use of `Module#autoload?` is a compatibility risk.'
|
19
|
-
|
20
|
-
def eligible_node? node
|
21
|
-
node.method?(:autoload?)
|
22
|
-
end
|
23
|
-
|
24
|
-
def on_send node
|
25
|
-
return false unless eligible_node?(node)
|
26
|
-
|
27
|
-
add_offense(node, location: :selector)
|
28
|
-
end
|
29
|
-
|
30
|
-
def autocorrect node
|
31
|
-
->(corrector) { corrector.replace(node.loc.selector, 'cs__autoload?') }
|
32
|
-
end
|
33
|
-
end
|
34
|
-
end
|
35
|
-
end
|
36
|
-
end
|
37
|
-
end
|
@@ -1,37 +0,0 @@
|
|
1
|
-
# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
-
# frozen_string_literal: true
|
3
|
-
|
4
|
-
module RuboCop
|
5
|
-
module Cop
|
6
|
-
module Security
|
7
|
-
module Module
|
8
|
-
# This cop checks for the use of `Module#const_defined`.
|
9
|
-
#
|
10
|
-
# @example
|
11
|
-
#
|
12
|
-
# # bad
|
13
|
-
# Module.const_defined?(something)
|
14
|
-
#
|
15
|
-
# # good
|
16
|
-
# Module.cs__const_defined?(something)
|
17
|
-
class ConstDefined < Cop
|
18
|
-
MSG = 'The use of `Module#const_defined?` is a compatibility risk.'
|
19
|
-
|
20
|
-
def eligible_node? node
|
21
|
-
node.method?(:const_defined?)
|
22
|
-
end
|
23
|
-
|
24
|
-
def on_send node
|
25
|
-
return false unless eligible_node?(node)
|
26
|
-
|
27
|
-
add_offense(node, location: :selector)
|
28
|
-
end
|
29
|
-
|
30
|
-
def autocorrect node
|
31
|
-
->(corrector) { corrector.replace(node.loc.selector, 'cs__const_defined?') }
|
32
|
-
end
|
33
|
-
end
|
34
|
-
end
|
35
|
-
end
|
36
|
-
end
|
37
|
-
end
|
@@ -1,37 +0,0 @@
|
|
1
|
-
# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
-
# frozen_string_literal: true
|
3
|
-
|
4
|
-
module RuboCop
|
5
|
-
module Cop
|
6
|
-
module Security
|
7
|
-
module Module
|
8
|
-
# This cop checks for the use of `Module#const_get`.
|
9
|
-
#
|
10
|
-
# @example
|
11
|
-
#
|
12
|
-
# # bad
|
13
|
-
# Module.const_get(something)
|
14
|
-
#
|
15
|
-
# # good
|
16
|
-
# Module.cs__const_get(something)
|
17
|
-
class ConstGet < Cop
|
18
|
-
MSG = 'The use of `Module#const_get` is a compatibility risk.'
|
19
|
-
|
20
|
-
def eligible_node? node
|
21
|
-
node.method?(:const_get)
|
22
|
-
end
|
23
|
-
|
24
|
-
def on_send node
|
25
|
-
return false unless eligible_node?(node)
|
26
|
-
|
27
|
-
add_offense(node, location: :selector)
|
28
|
-
end
|
29
|
-
|
30
|
-
def autocorrect node
|
31
|
-
->(corrector) { corrector.replace(node.loc.selector, 'cs__const_get') }
|
32
|
-
end
|
33
|
-
end
|
34
|
-
end
|
35
|
-
end
|
36
|
-
end
|
37
|
-
end
|
@@ -1,37 +0,0 @@
|
|
1
|
-
# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
-
# frozen_string_literal: true
|
3
|
-
|
4
|
-
module RuboCop
|
5
|
-
module Cop
|
6
|
-
module Security
|
7
|
-
module Module
|
8
|
-
# This cop checks for the use of `Module#const_set`.
|
9
|
-
#
|
10
|
-
# @example
|
11
|
-
#
|
12
|
-
# # bad
|
13
|
-
# Module.const_set(symbol, value)
|
14
|
-
#
|
15
|
-
# # good
|
16
|
-
# Module.cs__const_set(symbol, value)
|
17
|
-
class ConstSet < Cop
|
18
|
-
MSG = 'The use of `Module#const_set` is a compatibility risk.'
|
19
|
-
|
20
|
-
def eligible_node? node
|
21
|
-
node.method?(:const_set)
|
22
|
-
end
|
23
|
-
|
24
|
-
def on_send node
|
25
|
-
return false unless eligible_node?(node)
|
26
|
-
|
27
|
-
add_offense(node, location: :selector)
|
28
|
-
end
|
29
|
-
|
30
|
-
def autocorrect node
|
31
|
-
->(corrector) { corrector.replace(node.loc.selector, 'cs__const_set') }
|
32
|
-
end
|
33
|
-
end
|
34
|
-
end
|
35
|
-
end
|
36
|
-
end
|
37
|
-
end
|
@@ -1,37 +0,0 @@
|
|
1
|
-
# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
-
# frozen_string_literal: true
|
3
|
-
|
4
|
-
module RuboCop
|
5
|
-
module Cop
|
6
|
-
module Security
|
7
|
-
module Module
|
8
|
-
# This cop checks for the use of `Module#constants`.
|
9
|
-
#
|
10
|
-
# @example
|
11
|
-
#
|
12
|
-
# # bad
|
13
|
-
# Module.constants
|
14
|
-
#
|
15
|
-
# # good
|
16
|
-
# Module.cs__constants
|
17
|
-
class Constants < Cop
|
18
|
-
MSG = 'The use of `Module#constants` is a compatibility risk.'
|
19
|
-
|
20
|
-
def eligible_node? node
|
21
|
-
node.method?(:constants)
|
22
|
-
end
|
23
|
-
|
24
|
-
def on_send node
|
25
|
-
return false unless eligible_node?(node)
|
26
|
-
|
27
|
-
add_offense(node, location: :selector)
|
28
|
-
end
|
29
|
-
|
30
|
-
def autocorrect node
|
31
|
-
->(corrector) { corrector.replace(node.loc.selector, 'cs__constants') }
|
32
|
-
end
|
33
|
-
end
|
34
|
-
end
|
35
|
-
end
|
36
|
-
end
|
37
|
-
end
|
@@ -1,37 +0,0 @@
|
|
1
|
-
# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
-
# frozen_string_literal: true
|
3
|
-
|
4
|
-
module RuboCop
|
5
|
-
module Cop
|
6
|
-
module Security
|
7
|
-
module Module
|
8
|
-
# This cop checks for the use of `Module#name`.
|
9
|
-
#
|
10
|
-
# @example
|
11
|
-
#
|
12
|
-
# # bad
|
13
|
-
# Module.name
|
14
|
-
#
|
15
|
-
# # good
|
16
|
-
# Module.cs__name
|
17
|
-
class Name < Cop
|
18
|
-
MSG = 'The use of `Module#name` is a compatibility risk.'
|
19
|
-
|
20
|
-
def eligible_node? node
|
21
|
-
false && node.method?(:name) # TODO: replace ExclusionMatcher#name, Rule#name, & ModuleData#name before enabling
|
22
|
-
end
|
23
|
-
|
24
|
-
def on_send node
|
25
|
-
return false unless eligible_node?(node)
|
26
|
-
|
27
|
-
add_offense(node, location: :selector)
|
28
|
-
end
|
29
|
-
|
30
|
-
def autocorrect node
|
31
|
-
->(corrector) { corrector.replace(node.loc.selector, 'cs__name') }
|
32
|
-
end
|
33
|
-
end
|
34
|
-
end
|
35
|
-
end
|
36
|
-
end
|
37
|
-
end
|
@@ -1,37 +0,0 @@
|
|
1
|
-
# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
-
# frozen_string_literal: true
|
3
|
-
|
4
|
-
module RuboCop
|
5
|
-
module Cop
|
6
|
-
module Security
|
7
|
-
module Object
|
8
|
-
# This cop checks for the use of `Object#class`.
|
9
|
-
#
|
10
|
-
# @example
|
11
|
-
#
|
12
|
-
# # bad
|
13
|
-
# Object.class
|
14
|
-
#
|
15
|
-
# # good
|
16
|
-
# Object.cs__class
|
17
|
-
class Class < Cop
|
18
|
-
MSG = 'The use of `Object#class` is a compatibility risk.'
|
19
|
-
|
20
|
-
def eligible_node? node
|
21
|
-
node.method?(:class)
|
22
|
-
end
|
23
|
-
|
24
|
-
def on_send node
|
25
|
-
return false unless eligible_node?(node)
|
26
|
-
|
27
|
-
add_offense(node, location: :selector)
|
28
|
-
end
|
29
|
-
|
30
|
-
def autocorrect node
|
31
|
-
->(corrector) { corrector.replace(node.loc.selector, 'cs__class') }
|
32
|
-
end
|
33
|
-
end
|
34
|
-
end
|
35
|
-
end
|
36
|
-
end
|
37
|
-
end
|
@@ -1,37 +0,0 @@
|
|
1
|
-
# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
-
# frozen_string_literal: true
|
3
|
-
|
4
|
-
module RuboCop
|
5
|
-
module Cop
|
6
|
-
module Security
|
7
|
-
module Object
|
8
|
-
# This cop checks for the use of `Object#freeze`.
|
9
|
-
#
|
10
|
-
# @example
|
11
|
-
#
|
12
|
-
# # bad
|
13
|
-
# Object.freeze
|
14
|
-
#
|
15
|
-
# # good
|
16
|
-
# Object.cs__freeze
|
17
|
-
class Freeze < Cop
|
18
|
-
MSG = 'The use of `Object#freeze` is a compatibility risk.'
|
19
|
-
|
20
|
-
def eligible_node? node
|
21
|
-
node.method?(:freeze)
|
22
|
-
end
|
23
|
-
|
24
|
-
def on_send node
|
25
|
-
return false unless eligible_node?(node)
|
26
|
-
|
27
|
-
add_offense(node, location: :selector)
|
28
|
-
end
|
29
|
-
|
30
|
-
def autocorrect node
|
31
|
-
->(corrector) { corrector.replace(node.loc.selector, 'cs__freeze') }
|
32
|
-
end
|
33
|
-
end
|
34
|
-
end
|
35
|
-
end
|
36
|
-
end
|
37
|
-
end
|