contrast-agent 3.9.0 → 3.11.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (271) hide show
  1. checksums.yaml +4 -4
  2. data/.simplecov +5 -2
  3. data/ext/build_funchook.rb +14 -9
  4. data/ext/cs__assess_active_record_named/cs__active_record_named.c +5 -12
  5. data/ext/cs__assess_active_record_named/extconf.rb +3 -0
  6. data/ext/cs__assess_array/cs__assess_array.c +3 -5
  7. data/ext/cs__assess_array/extconf.rb +3 -0
  8. data/ext/cs__assess_basic_object/cs__assess_basic_object.c +10 -4
  9. data/ext/cs__assess_basic_object/extconf.rb +3 -0
  10. data/ext/cs__assess_fiber_track/cs__assess_fiber_track.c +4 -3
  11. data/ext/cs__assess_fiber_track/cs__assess_fiber_track.h +3 -3
  12. data/ext/cs__assess_fiber_track/extconf.rb +3 -0
  13. data/ext/cs__assess_hash/cs__assess_hash.c +40 -17
  14. data/ext/cs__assess_hash/cs__assess_hash.h +4 -6
  15. data/ext/cs__assess_hash/extconf.rb +3 -0
  16. data/ext/cs__assess_kernel/cs__assess_kernel.c +10 -8
  17. data/ext/cs__assess_kernel/cs__assess_kernel.h +1 -0
  18. data/ext/cs__assess_kernel/extconf.rb +3 -0
  19. data/ext/cs__assess_marshal_module/cs__assess_marshal_module.c +3 -6
  20. data/ext/cs__assess_marshal_module/extconf.rb +3 -0
  21. data/ext/cs__assess_module/cs__assess_module.c +13 -9
  22. data/ext/cs__assess_module/extconf.rb +3 -0
  23. data/ext/cs__assess_regexp/cs__assess_regexp.c +13 -9
  24. data/ext/cs__assess_regexp/cs__assess_regexp.h +1 -0
  25. data/ext/cs__assess_regexp/extconf.rb +3 -0
  26. data/ext/cs__assess_string/cs__assess_string.c +5 -8
  27. data/ext/cs__assess_string/cs__assess_string.h +2 -1
  28. data/ext/cs__assess_string/extconf.rb +3 -0
  29. data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.c +2 -2
  30. data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.h +3 -3
  31. data/ext/cs__assess_string_interpolation26/extconf.rb +3 -0
  32. data/ext/cs__assess_yield_track/cs__assess_yield_track.h +1 -1
  33. data/ext/cs__assess_yield_track/extconf.rb +3 -0
  34. data/ext/cs__common/cs__common.c +79 -0
  35. data/ext/cs__common/cs__common.h +34 -0
  36. data/ext/cs__common/extconf.rb +9 -8
  37. data/ext/cs__contrast_patch/cs__contrast_patch.h +1 -6
  38. data/ext/cs__contrast_patch/extconf.rb +3 -0
  39. data/ext/cs__protect_kernel/cs__protect_kernel.c +20 -11
  40. data/ext/cs__protect_kernel/extconf.rb +3 -0
  41. data/ext/extconf_common.rb +10 -8
  42. data/funchook/autom4te.cache/output.0 +1 -13
  43. data/funchook/autom4te.cache/requests +44 -45
  44. data/funchook/autom4te.cache/traces.0 +0 -3
  45. data/funchook/config.log +378 -217
  46. data/funchook/config.status +23 -24
  47. data/funchook/configure +1 -13
  48. data/funchook/src/Makefile +7 -7
  49. data/funchook/src/config.h +2 -2
  50. data/funchook/src/decoder.o +0 -0
  51. data/funchook/src/distorm.o +0 -0
  52. data/funchook/src/funchook.o +0 -0
  53. data/funchook/src/funchook_io.o +0 -0
  54. data/funchook/src/funchook_syscall.o +0 -0
  55. data/funchook/src/funchook_unix.o +0 -0
  56. data/funchook/src/funchook_x86.o +0 -0
  57. data/funchook/src/instructions.o +0 -0
  58. data/funchook/src/insts.o +0 -0
  59. data/funchook/src/libfunchook.dylib +0 -0
  60. data/funchook/src/mnemonics.o +0 -0
  61. data/funchook/src/operands.o +0 -0
  62. data/funchook/src/os_func.o +0 -0
  63. data/funchook/src/os_func_unix.o +0 -0
  64. data/funchook/src/prefix.o +0 -0
  65. data/funchook/src/printf_base.o +0 -0
  66. data/funchook/src/textdefs.o +0 -0
  67. data/funchook/src/wstring.o +0 -0
  68. data/funchook/test/Makefile +2 -2
  69. data/funchook/test/funchook_test +0 -0
  70. data/funchook/test/libfunchook_test.so +0 -0
  71. data/funchook/test/libfunchook_test.so.dSYM/Contents/Info.plist +20 -0
  72. data/funchook/test/libfunchook_test.so.dSYM/Contents/Resources/DWARF/libfunchook_test.so +0 -0
  73. data/funchook/test/test_main.o +0 -0
  74. data/funchook/test/x86_64_test.o +0 -0
  75. data/lib/contrast.rb +1 -0
  76. data/lib/contrast/agent.rb +21 -15
  77. data/lib/contrast/agent/assess.rb +1 -2
  78. data/lib/contrast/agent/assess/adjusted_span.rb +3 -1
  79. data/lib/contrast/agent/assess/contrast_event.rb +20 -68
  80. data/lib/contrast/agent/assess/events/event_factory.rb +25 -0
  81. data/lib/contrast/agent/assess/events/source_event.rb +83 -0
  82. data/lib/contrast/agent/assess/insulator.rb +0 -4
  83. data/lib/contrast/agent/assess/policy/patcher.rb +5 -2
  84. data/lib/contrast/agent/assess/policy/policy_node.rb +0 -7
  85. data/lib/contrast/agent/assess/policy/policy_scanner.rb +1 -1
  86. data/lib/contrast/agent/assess/policy/preshift.rb +1 -1
  87. data/lib/contrast/agent/assess/policy/propagation_method.rb +65 -33
  88. data/lib/contrast/agent/assess/policy/propagation_node.rb +2 -1
  89. data/lib/contrast/agent/assess/policy/propagator.rb +1 -0
  90. data/lib/contrast/agent/assess/policy/propagator/match_data.rb +80 -0
  91. data/lib/contrast/agent/assess/policy/propagator/select.rb +35 -22
  92. data/lib/contrast/agent/assess/policy/propagator/split.rb +26 -6
  93. data/lib/contrast/agent/assess/policy/propagator/substitution.rb +2 -0
  94. data/lib/contrast/agent/assess/policy/rewriter_patch.rb +40 -27
  95. data/lib/contrast/agent/assess/policy/source_method.rb +20 -20
  96. data/lib/contrast/agent/assess/policy/source_node.rb +0 -15
  97. data/lib/contrast/agent/assess/policy/trigger_method.rb +29 -40
  98. data/lib/contrast/agent/assess/policy/trigger_node.rb +3 -6
  99. data/lib/contrast/agent/assess/policy/trigger_validation/ssrf_validator.rb +2 -31
  100. data/lib/contrast/agent/assess/properties.rb +5 -3
  101. data/lib/contrast/agent/assess/rule/base.rb +1 -5
  102. data/lib/contrast/agent/assess/rule/csrf/csrf_applicator.rb +2 -22
  103. data/lib/contrast/agent/assess/rule/csrf/csrf_watcher.rb +5 -1
  104. data/lib/contrast/agent/assess/rule/provider/hardcoded_value_rule.rb +2 -2
  105. data/lib/contrast/agent/assess/rule/redos.rb +4 -4
  106. data/lib/contrast/agent/assess/tag.rb +24 -14
  107. data/lib/contrast/agent/at_exit_hook.rb +16 -13
  108. data/lib/contrast/agent/class_reopener.rb +15 -6
  109. data/lib/contrast/agent/deadzone/policy/policy.rb +2 -2
  110. data/lib/contrast/agent/disable_reaction.rb +3 -4
  111. data/lib/contrast/agent/exclusion_matcher.rb +8 -48
  112. data/lib/contrast/agent/feature_state.rb +45 -78
  113. data/lib/contrast/agent/logger.rb +173 -0
  114. data/lib/contrast/agent/middleware.rb +87 -250
  115. data/lib/contrast/agent/module_data.rb +2 -1
  116. data/lib/contrast/agent/patching/policy/after_load_patch.rb +2 -1
  117. data/lib/contrast/agent/patching/policy/after_load_patcher.rb +21 -4
  118. data/lib/contrast/agent/patching/policy/method_policy.rb +3 -3
  119. data/lib/contrast/agent/patching/policy/module_policy.rb +0 -25
  120. data/lib/contrast/agent/patching/policy/patch.rb +96 -23
  121. data/lib/contrast/agent/patching/policy/patcher.rb +19 -19
  122. data/lib/contrast/agent/patching/policy/policy.rb +7 -7
  123. data/lib/contrast/agent/patching/policy/policy_node.rb +2 -10
  124. data/lib/contrast/agent/patching/policy/trigger_node.rb +1 -4
  125. data/lib/contrast/agent/protect/rule/base.rb +14 -33
  126. data/lib/contrast/agent/protect/rule/base_service.rb +3 -1
  127. data/lib/contrast/agent/protect/rule/cmd_injection.rb +10 -13
  128. data/lib/contrast/agent/protect/rule/csrf.rb +2 -1
  129. data/lib/contrast/agent/protect/rule/csrf/csrf_evaluator.rb +11 -14
  130. data/lib/contrast/agent/protect/rule/default_scanner.rb +0 -13
  131. data/lib/contrast/agent/protect/rule/deserialization.rb +2 -0
  132. data/lib/contrast/agent/protect/rule/http_method_tampering.rb +2 -2
  133. data/lib/contrast/agent/protect/rule/no_sqli.rb +4 -4
  134. data/lib/contrast/agent/protect/rule/path_traversal.rb +5 -4
  135. data/lib/contrast/agent/protect/rule/sqli.rb +1 -0
  136. data/lib/contrast/agent/protect/rule/unsafe_file_upload.rb +2 -0
  137. data/lib/contrast/agent/protect/rule/xss.rb +2 -0
  138. data/lib/contrast/agent/protect/rule/xxe.rb +10 -4
  139. data/lib/contrast/agent/railtie.rb +2 -8
  140. data/lib/contrast/agent/reaction_processor.rb +5 -5
  141. data/lib/contrast/agent/request.rb +9 -12
  142. data/lib/contrast/agent/request_context.rb +12 -14
  143. data/lib/contrast/agent/request_handler.rb +35 -0
  144. data/lib/contrast/agent/response.rb +52 -30
  145. data/lib/contrast/agent/rewriter.rb +25 -11
  146. data/lib/contrast/agent/rule_set.rb +49 -0
  147. data/lib/contrast/agent/scope.rb +4 -12
  148. data/lib/contrast/agent/service_heartbeat.rb +1 -2
  149. data/lib/contrast/agent/settings_state.rb +10 -74
  150. data/lib/contrast/agent/socket_client.rb +17 -11
  151. data/lib/contrast/agent/static_analysis.rb +42 -0
  152. data/lib/contrast/agent/thread.rb +1 -1
  153. data/lib/contrast/agent/tracepoint_hook.rb +1 -5
  154. data/lib/contrast/agent/version.rb +1 -1
  155. data/lib/contrast/api.rb +1 -1
  156. data/lib/contrast/api/decorators.rb +14 -0
  157. data/lib/contrast/api/decorators/application_settings.rb +37 -0
  158. data/lib/contrast/api/decorators/application_update.rb +66 -0
  159. data/lib/contrast/api/decorators/exclusion.rb +20 -0
  160. data/lib/contrast/api/decorators/input_analysis.rb +17 -0
  161. data/lib/contrast/api/decorators/server_features.rb +24 -0
  162. data/lib/contrast/api/speedracer.rb +31 -29
  163. data/lib/contrast/api/tcp_socket.rb +0 -2
  164. data/lib/contrast/components/agent.rb +27 -22
  165. data/lib/contrast/components/app_context.rb +18 -43
  166. data/lib/contrast/components/config.rb +7 -5
  167. data/lib/contrast/components/contrast_service.rb +0 -4
  168. data/lib/contrast/components/heap_dump.rb +12 -8
  169. data/lib/contrast/components/interface.rb +11 -10
  170. data/lib/contrast/components/logger.rb +3 -68
  171. data/lib/contrast/components/sampling.rb +22 -11
  172. data/lib/contrast/components/settings.rb +18 -5
  173. data/lib/contrast/config/base_configuration.rb +1 -0
  174. data/lib/contrast/config/default_value.rb +1 -0
  175. data/lib/contrast/config/protect_rule_configuration.rb +0 -14
  176. data/lib/contrast/configuration.rb +3 -5
  177. data/lib/contrast/extensions/framework/rails/action_controller_inheritance.rb +39 -0
  178. data/lib/contrast/extensions/framework/rails/active_record_named.rb +13 -8
  179. data/lib/contrast/extensions/ruby_core/assess.rb +1 -2
  180. data/lib/contrast/extensions/ruby_core/assess/assess_extension.rb +27 -22
  181. data/lib/contrast/extensions/ruby_core/assess/erb.rb +0 -8
  182. data/lib/contrast/extensions/ruby_core/assess/exec_trigger.rb +6 -8
  183. data/lib/contrast/extensions/ruby_core/assess/fiber.rb +88 -100
  184. data/lib/contrast/extensions/ruby_core/assess/hash.rb +32 -15
  185. data/lib/contrast/extensions/ruby_core/assess/kernel.rb +28 -27
  186. data/lib/contrast/extensions/ruby_core/assess/regexp.rb +74 -196
  187. data/lib/contrast/extensions/ruby_core/assess/string.rb +15 -7
  188. data/lib/contrast/extensions/ruby_core/assess/tilt_template_trigger.rb +29 -24
  189. data/lib/contrast/extensions/ruby_core/assess/xpath_library_trigger.rb +2 -2
  190. data/lib/contrast/extensions/ruby_core/eval_trigger.rb +0 -1
  191. data/lib/contrast/extensions/ruby_core/inventory/datastores.rb +2 -2
  192. data/lib/contrast/extensions/ruby_core/protect/applies_command_injection_rule.rb +9 -20
  193. data/lib/contrast/extensions/ruby_core/protect/applies_deserialization_rule.rb +9 -19
  194. data/lib/contrast/extensions/ruby_core/protect/applies_no_sqli_rule.rb +10 -27
  195. data/lib/contrast/extensions/ruby_core/protect/applies_path_traversal_rule.rb +13 -21
  196. data/lib/contrast/extensions/ruby_core/protect/applies_sqli_rule.rb +11 -23
  197. data/lib/contrast/extensions/ruby_core/protect/applies_xxe_rule.rb +62 -78
  198. data/lib/contrast/extensions/ruby_core/protect/rule_applicator.rb +50 -0
  199. data/lib/contrast/framework/base_support.rb +10 -0
  200. data/lib/contrast/framework/manager.rb +28 -2
  201. data/lib/contrast/framework/platform_version.rb +1 -0
  202. data/lib/contrast/framework/rails_support.rb +16 -0
  203. data/lib/contrast/framework/sinatra_support.rb +12 -2
  204. data/lib/contrast/framework/view_technologies_descriptor.rb +1 -0
  205. data/lib/contrast/tasks/service.rb +2 -8
  206. data/lib/contrast/utils/assess/sampling_util.rb +4 -9
  207. data/lib/contrast/utils/assess/tracking_util.rb +7 -1
  208. data/lib/contrast/utils/boolean_util.rb +2 -5
  209. data/lib/contrast/utils/cache.rb +0 -11
  210. data/lib/contrast/utils/class_util.rb +20 -1
  211. data/lib/contrast/utils/gemfile_reader.rb +5 -3
  212. data/lib/contrast/utils/hash_digest.rb +0 -4
  213. data/lib/contrast/utils/heap_dump_util.rb +12 -11
  214. data/lib/contrast/utils/invalid_configuration_util.rb +1 -1
  215. data/lib/contrast/utils/inventory_util.rb +2 -2
  216. data/lib/contrast/utils/io_util.rb +1 -11
  217. data/lib/contrast/utils/job_servers_running.rb +2 -2
  218. data/lib/contrast/utils/object_share.rb +1 -37
  219. data/lib/contrast/utils/os.rb +1 -25
  220. data/lib/contrast/utils/rack_assess_session_cookie.rb +3 -3
  221. data/lib/contrast/utils/rails_assess_configuration.rb +3 -3
  222. data/lib/contrast/utils/ruby_ast_rewriter.rb +5 -1
  223. data/lib/contrast/utils/service_response_util.rb +27 -53
  224. data/lib/contrast/utils/service_sender_util.rb +9 -5
  225. data/lib/contrast/utils/sinatra_helper.rb +0 -6
  226. data/lib/contrast/utils/stack_trace_utils.rb +86 -182
  227. data/lib/contrast/utils/string_utils.rb +18 -2
  228. data/lib/contrast/utils/tag_util.rb +11 -1
  229. data/lib/contrast/utils/thread_tracker.rb +2 -2
  230. data/lib/contrast/utils/timer.rb +0 -40
  231. data/resources/assess/policy.json +33 -21
  232. data/resources/protect/policy.json +9 -9
  233. data/ruby-agent.gemspec +7 -4
  234. data/service_executables/VERSION +1 -1
  235. data/service_executables/linux/contrast-service +0 -0
  236. data/service_executables/mac/contrast-service +0 -0
  237. metadata +79 -54
  238. data/ext/cs__assess_regexp_track/cs__assess_regexp_track.c +0 -63
  239. data/ext/cs__assess_regexp_track/cs__assess_regexp_track.h +0 -29
  240. data/ext/cs__assess_regexp_track/extconf.rb +0 -2
  241. data/funchook/src/libfunchook.so +0 -0
  242. data/lib/contrast/agent/assess/frozen_properties.rb +0 -41
  243. data/lib/contrast/agent/logger_manager.rb +0 -116
  244. data/lib/contrast/delegators.rb +0 -9
  245. data/lib/contrast/delegators/application_update.rb +0 -32
  246. data/lib/contrast/utils/comment_range.rb +0 -19
  247. data/lib/contrast/utils/environment_util.rb +0 -82
  248. data/lib/contrast/utils/performs_logging.rb +0 -152
  249. data/resources/factory-bot-spec/spec_helper.rb +0 -30
  250. data/resources/rubocops/kernel/catch_cop.rb +0 -37
  251. data/resources/rubocops/kernel/require_cop.rb +0 -37
  252. data/resources/rubocops/kernel/require_relative_cop.rb +0 -33
  253. data/resources/rubocops/module/autoload_cop.rb +0 -37
  254. data/resources/rubocops/module/const_defined_cop.rb +0 -37
  255. data/resources/rubocops/module/const_get_cop.rb +0 -37
  256. data/resources/rubocops/module/const_set_cop.rb +0 -37
  257. data/resources/rubocops/module/constants_cop.rb +0 -37
  258. data/resources/rubocops/module/name_cop.rb +0 -37
  259. data/resources/rubocops/object/class_cop.rb +0 -37
  260. data/resources/rubocops/object/freeze_cop.rb +0 -37
  261. data/resources/rubocops/object/frozen_cop.rb +0 -37
  262. data/resources/rubocops/object/is_a_cop.rb +0 -37
  263. data/resources/rubocops/object/method_cop.rb +0 -37
  264. data/resources/rubocops/object/respond_to_cop.rb +0 -37
  265. data/resources/rubocops/object/singleton_class_cop.rb +0 -37
  266. data/resources/rubocops/regexp/spelling_cop.rb +0 -44
  267. data/resources/rubocops/thread/new_cop.rb +0 -39
  268. data/resources/ruby-spec/ancestors_spec.rb +0 -70
  269. data/resources/ruby-spec/modulo_spec.rb +0 -831
  270. data/resources/ruby-spec/parameters_spec.rb +0 -261
  271. data/resources/ruby-spec/ruby_spec_spec_helper.rb +0 -35
@@ -1,30 +0,0 @@
1
- require "rspec"
2
- require "rspec/its"
3
-
4
- require "simplecov"
5
-
6
- require "factory_bot"
7
- require 'contrast-agent'
8
- Contrast::Agent::Patching::Policy::Patcher.patch
9
-
10
- Dir["spec/support/**/*.rb"].each { |f| require File.expand_path(f) }
11
-
12
- RSpec.configure do |config|
13
- config.mock_with :rspec do |mocks|
14
- # Prevents you from mocking or stubbing a method that does not exist on a
15
- # real object. This is generally recommended, and will default to `true` in
16
- # RSpec 4.
17
- mocks.verify_partial_doubles = true
18
- end
19
-
20
- config.include DeclarationMatchers
21
-
22
- config.before do
23
- FactoryBot.reload
24
- end
25
-
26
- config.order = :random
27
- Kernel.srand config.seed
28
-
29
- config.example_status_persistence_file_path = "tmp/rspec_examples.txt"
30
- end
@@ -1,37 +0,0 @@
1
- # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
- # frozen_string_literal: true
3
-
4
- module RuboCop
5
- module Cop
6
- module Security
7
- module Kernel
8
- # This cop checks for the use of `Kernel.catch`.
9
- #
10
- # @example
11
- #
12
- # # bad
13
- # Kernel.catch
14
- #
15
- # # good
16
- # Kernel.cs__catch
17
- class Catch < Cop
18
- MSG = 'The use of `catch` is a compatibility risk.'
19
-
20
- def eligible_node? node
21
- node.method?(:catch)
22
- end
23
-
24
- def on_send node
25
- return false unless eligible_node?(node)
26
-
27
- add_offense(node, location: :selector)
28
- end
29
-
30
- def autocorrect node
31
- ->(corrector) { corrector.replace(node.loc.selector, 'cs__catch') }
32
- end
33
- end
34
- end
35
- end
36
- end
37
- end
@@ -1,37 +0,0 @@
1
- # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
- # frozen_string_literal: true
3
-
4
- module RuboCop
5
- module Cop
6
- module Security
7
- module Kernel
8
- # This cop checks for the use of `Kernel.require`.
9
- #
10
- # @example
11
- #
12
- # # bad
13
- # Kernel.require
14
- #
15
- # # good
16
- # Kernel.cs__scoped_require
17
- class Require < Cop
18
- MSG = 'The use of `require` is a scoping risk.'
19
-
20
- def eligible_node? node
21
- node.method?(:require)
22
- end
23
-
24
- def on_send node
25
- return false unless eligible_node?(node)
26
-
27
- add_offense(node, location: :selector)
28
- end
29
-
30
- def autocorrect node
31
- ->(corrector) { corrector.replace(node.loc.selector, 'cs__scoped_require') }
32
- end
33
- end
34
- end
35
- end
36
- end
37
- end
@@ -1,33 +0,0 @@
1
- # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
- # frozen_string_literal: true
3
-
4
- module RuboCop
5
- module Cop
6
- module Security
7
- module Kernel
8
- # This cop checks for the use of `Kernel.require_relative`.
9
- #
10
- # @example
11
- #
12
- # # bad
13
- # Kernel.require_relative
14
- #
15
- # # good
16
- # Kernel.cs__scoped_require
17
- class RequireRelative < Cop
18
- MSG = 'The use of `require_relative` is a scoping risk. User `cs__scoped_require` instead'
19
-
20
- def eligible_node? node
21
- node.method?(:require_relative)
22
- end
23
-
24
- def on_send node
25
- return false unless eligible_node?(node)
26
-
27
- add_offense(node, location: :selector)
28
- end
29
- end
30
- end
31
- end
32
- end
33
- end
@@ -1,37 +0,0 @@
1
- # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
- # frozen_string_literal: true
3
-
4
- module RuboCop
5
- module Cop
6
- module Security
7
- module Module
8
- # This cop checks for the use of `Module#autoload?`.
9
- #
10
- # @example
11
- #
12
- # # bad
13
- # Module.autoload?
14
- #
15
- # # good
16
- # Module.cs__autoload?
17
- class Autoload < Cop
18
- MSG = 'The use of `Module#autoload?` is a compatibility risk.'
19
-
20
- def eligible_node? node
21
- node.method?(:autoload?)
22
- end
23
-
24
- def on_send node
25
- return false unless eligible_node?(node)
26
-
27
- add_offense(node, location: :selector)
28
- end
29
-
30
- def autocorrect node
31
- ->(corrector) { corrector.replace(node.loc.selector, 'cs__autoload?') }
32
- end
33
- end
34
- end
35
- end
36
- end
37
- end
@@ -1,37 +0,0 @@
1
- # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
- # frozen_string_literal: true
3
-
4
- module RuboCop
5
- module Cop
6
- module Security
7
- module Module
8
- # This cop checks for the use of `Module#const_defined`.
9
- #
10
- # @example
11
- #
12
- # # bad
13
- # Module.const_defined?(something)
14
- #
15
- # # good
16
- # Module.cs__const_defined?(something)
17
- class ConstDefined < Cop
18
- MSG = 'The use of `Module#const_defined?` is a compatibility risk.'
19
-
20
- def eligible_node? node
21
- node.method?(:const_defined?)
22
- end
23
-
24
- def on_send node
25
- return false unless eligible_node?(node)
26
-
27
- add_offense(node, location: :selector)
28
- end
29
-
30
- def autocorrect node
31
- ->(corrector) { corrector.replace(node.loc.selector, 'cs__const_defined?') }
32
- end
33
- end
34
- end
35
- end
36
- end
37
- end
@@ -1,37 +0,0 @@
1
- # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
- # frozen_string_literal: true
3
-
4
- module RuboCop
5
- module Cop
6
- module Security
7
- module Module
8
- # This cop checks for the use of `Module#const_get`.
9
- #
10
- # @example
11
- #
12
- # # bad
13
- # Module.const_get(something)
14
- #
15
- # # good
16
- # Module.cs__const_get(something)
17
- class ConstGet < Cop
18
- MSG = 'The use of `Module#const_get` is a compatibility risk.'
19
-
20
- def eligible_node? node
21
- node.method?(:const_get)
22
- end
23
-
24
- def on_send node
25
- return false unless eligible_node?(node)
26
-
27
- add_offense(node, location: :selector)
28
- end
29
-
30
- def autocorrect node
31
- ->(corrector) { corrector.replace(node.loc.selector, 'cs__const_get') }
32
- end
33
- end
34
- end
35
- end
36
- end
37
- end
@@ -1,37 +0,0 @@
1
- # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
- # frozen_string_literal: true
3
-
4
- module RuboCop
5
- module Cop
6
- module Security
7
- module Module
8
- # This cop checks for the use of `Module#const_set`.
9
- #
10
- # @example
11
- #
12
- # # bad
13
- # Module.const_set(symbol, value)
14
- #
15
- # # good
16
- # Module.cs__const_set(symbol, value)
17
- class ConstSet < Cop
18
- MSG = 'The use of `Module#const_set` is a compatibility risk.'
19
-
20
- def eligible_node? node
21
- node.method?(:const_set)
22
- end
23
-
24
- def on_send node
25
- return false unless eligible_node?(node)
26
-
27
- add_offense(node, location: :selector)
28
- end
29
-
30
- def autocorrect node
31
- ->(corrector) { corrector.replace(node.loc.selector, 'cs__const_set') }
32
- end
33
- end
34
- end
35
- end
36
- end
37
- end
@@ -1,37 +0,0 @@
1
- # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
- # frozen_string_literal: true
3
-
4
- module RuboCop
5
- module Cop
6
- module Security
7
- module Module
8
- # This cop checks for the use of `Module#constants`.
9
- #
10
- # @example
11
- #
12
- # # bad
13
- # Module.constants
14
- #
15
- # # good
16
- # Module.cs__constants
17
- class Constants < Cop
18
- MSG = 'The use of `Module#constants` is a compatibility risk.'
19
-
20
- def eligible_node? node
21
- node.method?(:constants)
22
- end
23
-
24
- def on_send node
25
- return false unless eligible_node?(node)
26
-
27
- add_offense(node, location: :selector)
28
- end
29
-
30
- def autocorrect node
31
- ->(corrector) { corrector.replace(node.loc.selector, 'cs__constants') }
32
- end
33
- end
34
- end
35
- end
36
- end
37
- end
@@ -1,37 +0,0 @@
1
- # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
- # frozen_string_literal: true
3
-
4
- module RuboCop
5
- module Cop
6
- module Security
7
- module Module
8
- # This cop checks for the use of `Module#name`.
9
- #
10
- # @example
11
- #
12
- # # bad
13
- # Module.name
14
- #
15
- # # good
16
- # Module.cs__name
17
- class Name < Cop
18
- MSG = 'The use of `Module#name` is a compatibility risk.'
19
-
20
- def eligible_node? node
21
- false && node.method?(:name) # TODO: replace ExclusionMatcher#name, Rule#name, & ModuleData#name before enabling
22
- end
23
-
24
- def on_send node
25
- return false unless eligible_node?(node)
26
-
27
- add_offense(node, location: :selector)
28
- end
29
-
30
- def autocorrect node
31
- ->(corrector) { corrector.replace(node.loc.selector, 'cs__name') }
32
- end
33
- end
34
- end
35
- end
36
- end
37
- end
@@ -1,37 +0,0 @@
1
- # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
- # frozen_string_literal: true
3
-
4
- module RuboCop
5
- module Cop
6
- module Security
7
- module Object
8
- # This cop checks for the use of `Object#class`.
9
- #
10
- # @example
11
- #
12
- # # bad
13
- # Object.class
14
- #
15
- # # good
16
- # Object.cs__class
17
- class Class < Cop
18
- MSG = 'The use of `Object#class` is a compatibility risk.'
19
-
20
- def eligible_node? node
21
- node.method?(:class)
22
- end
23
-
24
- def on_send node
25
- return false unless eligible_node?(node)
26
-
27
- add_offense(node, location: :selector)
28
- end
29
-
30
- def autocorrect node
31
- ->(corrector) { corrector.replace(node.loc.selector, 'cs__class') }
32
- end
33
- end
34
- end
35
- end
36
- end
37
- end
@@ -1,37 +0,0 @@
1
- # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
- # frozen_string_literal: true
3
-
4
- module RuboCop
5
- module Cop
6
- module Security
7
- module Object
8
- # This cop checks for the use of `Object#freeze`.
9
- #
10
- # @example
11
- #
12
- # # bad
13
- # Object.freeze
14
- #
15
- # # good
16
- # Object.cs__freeze
17
- class Freeze < Cop
18
- MSG = 'The use of `Object#freeze` is a compatibility risk.'
19
-
20
- def eligible_node? node
21
- node.method?(:freeze)
22
- end
23
-
24
- def on_send node
25
- return false unless eligible_node?(node)
26
-
27
- add_offense(node, location: :selector)
28
- end
29
-
30
- def autocorrect node
31
- ->(corrector) { corrector.replace(node.loc.selector, 'cs__freeze') }
32
- end
33
- end
34
- end
35
- end
36
- end
37
- end