contrast-agent 3.9.1 → 6.15.3
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.dockerignore +0 -1
- data/.flayignore +1 -0
- data/.gitignore +8 -5
- data/.gitmodules +0 -3
- data/.rspec +0 -1
- data/.rspec_parallel +6 -0
- data/.simplecov +6 -2
- data/Gemfile +1 -1
- data/LICENSE.txt +1 -1
- data/Rakefile +5 -2
- data/ext/build_funchook.rb +16 -13
- data/ext/cs__assess_array/cs__assess_array.c +50 -6
- data/ext/cs__assess_array/cs__assess_array.h +5 -1
- data/ext/cs__assess_array/extconf.rb +3 -0
- data/ext/cs__assess_basic_object/cs__assess_basic_object.c +39 -17
- data/ext/cs__assess_basic_object/cs__assess_basic_object.h +2 -1
- data/ext/cs__assess_basic_object/extconf.rb +3 -0
- data/ext/cs__assess_fiber_track/cs__assess_fiber_track.c +9 -13
- data/ext/cs__assess_fiber_track/cs__assess_fiber_track.h +3 -4
- data/ext/cs__assess_fiber_track/extconf.rb +3 -0
- data/ext/cs__assess_hash/cs__assess_hash.c +46 -21
- data/ext/cs__assess_hash/cs__assess_hash.h +5 -6
- data/ext/cs__assess_hash/extconf.rb +3 -0
- data/ext/cs__assess_kernel/cs__assess_kernel.c +29 -15
- data/ext/cs__assess_kernel/cs__assess_kernel.h +3 -0
- data/ext/cs__assess_kernel/extconf.rb +3 -0
- data/ext/cs__assess_marshal_module/cs__assess_marshal_module.c +57 -23
- data/ext/cs__assess_marshal_module/cs__assess_marshal_module.h +6 -3
- data/ext/cs__assess_marshal_module/extconf.rb +3 -0
- data/ext/cs__assess_module/cs__assess_module.c +82 -22
- data/ext/cs__assess_module/cs__assess_module.h +10 -0
- data/ext/cs__assess_module/extconf.rb +3 -0
- data/ext/cs__assess_regexp/cs__assess_regexp.c +28 -9
- data/ext/cs__assess_regexp/cs__assess_regexp.h +3 -0
- data/ext/cs__assess_regexp/extconf.rb +3 -0
- data/ext/cs__assess_string/cs__assess_string.c +53 -21
- data/ext/cs__assess_string/cs__assess_string.h +7 -1
- data/ext/cs__assess_string/extconf.rb +3 -0
- data/ext/cs__assess_string_interpolation/cs__assess_string_interpolation.c +39 -0
- data/ext/cs__assess_string_interpolation/cs__assess_string_interpolation.h +13 -0
- data/ext/cs__assess_string_interpolation/extconf.rb +5 -0
- data/ext/cs__assess_test/cs__assess_test.h +9 -0
- data/ext/cs__assess_test/cs__assess_tests.c +22 -0
- data/ext/cs__assess_test/extconf.rb +5 -0
- data/ext/cs__assess_yield_track/cs__assess_yield_track.c +4 -8
- data/ext/cs__assess_yield_track/cs__assess_yield_track.h +1 -2
- data/ext/cs__assess_yield_track/extconf.rb +3 -0
- data/ext/cs__common/cs__common.c +240 -4
- data/ext/cs__common/cs__common.h +68 -1
- data/ext/cs__common/extconf.rb +3 -16
- data/ext/cs__contrast_patch/cs__contrast_patch.c +162 -83
- data/ext/cs__contrast_patch/cs__contrast_patch.h +11 -15
- data/ext/cs__contrast_patch/extconf.rb +3 -0
- data/ext/cs__os_information/cs__os_information.c +34 -0
- data/ext/cs__os_information/cs__os_information.h +7 -0
- data/ext/cs__os_information/extconf.rb +5 -0
- data/ext/cs__scope/cs__scope.c +980 -0
- data/ext/cs__scope/cs__scope.h +90 -0
- data/ext/cs__scope/extconf.rb +5 -0
- data/ext/cs__tests/cs__tests.c +12 -0
- data/ext/cs__tests/cs__tests.h +3 -0
- data/ext/cs__tests/extconf.rb +5 -0
- data/ext/extconf_common.rb +4 -34
- data/lib/contrast/agent/assess/assess.rb +23 -0
- data/lib/contrast/agent/assess/contrast_object.rb +54 -0
- data/lib/contrast/agent/assess/events/event_data.rb +30 -0
- data/lib/contrast/agent/assess/finalizers/freeze.rb +15 -0
- data/lib/contrast/agent/assess/finalizers/hash.rb +107 -0
- data/lib/contrast/agent/{module_data.rb → assess/module_data.rb} +5 -4
- data/lib/contrast/agent/assess/policy/dynamic_source_factory.rb +23 -48
- data/lib/contrast/agent/assess/policy/patcher.rb +13 -48
- data/lib/contrast/agent/assess/policy/policy.rb +20 -23
- data/lib/contrast/agent/assess/policy/policy_node.rb +97 -200
- data/lib/contrast/agent/assess/policy/policy_node_utils.rb +50 -0
- data/lib/contrast/agent/assess/policy/policy_scanner.rb +15 -12
- data/lib/contrast/agent/assess/policy/preshift.rb +49 -18
- data/lib/contrast/agent/assess/policy/propagation_method.rb +200 -194
- data/lib/contrast/agent/assess/policy/propagation_node.rb +49 -41
- data/lib/contrast/agent/assess/policy/propagator/append.rb +32 -15
- data/lib/contrast/agent/assess/policy/propagator/base.rb +5 -3
- data/lib/contrast/agent/assess/policy/propagator/buffer.rb +119 -0
- data/lib/contrast/agent/assess/policy/propagator/center.rb +12 -8
- data/lib/contrast/agent/assess/policy/propagator/custom.rb +7 -3
- data/lib/contrast/agent/assess/policy/propagator/database_write.rb +33 -25
- data/lib/contrast/agent/assess/policy/propagator/insert.rb +15 -11
- data/lib/contrast/agent/assess/policy/propagator/keep.rb +23 -6
- data/lib/contrast/agent/assess/policy/propagator/match_data.rb +118 -0
- data/lib/contrast/agent/assess/policy/propagator/next.rb +7 -6
- data/lib/contrast/agent/assess/policy/propagator/prepend.rb +13 -6
- data/lib/contrast/agent/assess/policy/propagator/rack_protection.rb +73 -0
- data/lib/contrast/agent/assess/policy/propagator/remove.rb +53 -41
- data/lib/contrast/agent/assess/policy/propagator/replace.rb +5 -3
- data/lib/contrast/agent/assess/policy/propagator/reverse.rb +7 -6
- data/lib/contrast/agent/assess/policy/propagator/select.rb +45 -36
- data/lib/contrast/agent/assess/policy/propagator/splat.rb +44 -21
- data/lib/contrast/agent/assess/policy/propagator/split.rb +133 -147
- data/lib/contrast/agent/assess/policy/propagator/substitution.rb +7 -132
- data/lib/contrast/agent/assess/policy/propagator/substitution_utils.rb +190 -0
- data/lib/contrast/agent/assess/policy/propagator/trim.rb +74 -52
- data/lib/contrast/agent/assess/policy/propagator.rb +21 -18
- data/lib/contrast/agent/assess/policy/source_method.rb +126 -188
- data/lib/contrast/agent/assess/policy/source_node.rb +3 -17
- data/lib/contrast/agent/assess/policy/source_validation/cross_site_validator.rb +9 -7
- data/lib/contrast/agent/assess/policy/source_validation/source_validation.rb +3 -5
- data/lib/contrast/agent/assess/policy/trigger/reflected_xss.rb +103 -0
- data/lib/contrast/agent/assess/policy/trigger/xpath.rb +57 -0
- data/lib/contrast/agent/assess/policy/trigger_method.rb +143 -206
- data/lib/contrast/agent/assess/policy/trigger_node.rb +144 -66
- data/lib/contrast/agent/assess/policy/trigger_validation/redos_validator.rb +98 -0
- data/lib/contrast/agent/assess/policy/trigger_validation/ssrf_validator.rb +8 -38
- data/lib/contrast/agent/assess/policy/trigger_validation/trigger_validation.rb +9 -7
- data/lib/contrast/agent/assess/policy/trigger_validation/xss_validator.rb +6 -15
- data/lib/contrast/agent/assess/properties.rb +15 -383
- data/lib/contrast/agent/assess/property/evented.rb +58 -0
- data/lib/contrast/agent/assess/property/tagged.rb +246 -0
- data/lib/contrast/agent/assess/property/updated.rb +131 -0
- data/lib/contrast/agent/assess/rule/provider/hardcoded_key.rb +58 -19
- data/lib/contrast/agent/assess/rule/provider/hardcoded_password.rb +22 -17
- data/lib/contrast/agent/assess/rule/provider/hardcoded_value_rule.rb +93 -81
- data/lib/contrast/agent/assess/rule/provider.rb +4 -4
- data/lib/contrast/agent/assess/rule/response/auto_complete_rule.rb +69 -0
- data/lib/contrast/agent/assess/rule/response/base_rule.rb +121 -0
- data/lib/contrast/agent/assess/rule/response/body_rule.rb +107 -0
- data/lib/contrast/agent/assess/rule/response/cache_control_header_rule.rb +195 -0
- data/lib/contrast/agent/assess/rule/response/click_jacking_header_rule.rb +26 -0
- data/lib/contrast/agent/assess/rule/response/csp_header_insecure_rule.rb +100 -0
- data/lib/contrast/agent/assess/rule/response/csp_header_missing_rule.rb +26 -0
- data/lib/contrast/agent/assess/rule/response/framework/rails_support.rb +34 -0
- data/lib/contrast/agent/assess/rule/response/header_rule.rb +70 -0
- data/lib/contrast/agent/assess/rule/response/hsts_header_rule.rb +36 -0
- data/lib/contrast/agent/assess/rule/response/parameters_pollution_rule.rb +61 -0
- data/lib/contrast/agent/assess/rule/response/x_content_type_header_rule.rb +26 -0
- data/lib/contrast/agent/assess/rule/response/x_xss_protection_header_rule.rb +34 -0
- data/lib/contrast/agent/assess/tag.rb +84 -41
- data/lib/contrast/agent/assess/tracker.rb +70 -0
- data/lib/contrast/agent/deadzone/policy/deadzone_node.rb +11 -6
- data/lib/contrast/agent/deadzone/policy/policy.rb +11 -7
- data/lib/contrast/agent/excluder/excluder.rb +306 -0
- data/lib/contrast/agent/excluder/exclusion_matcher.rb +112 -0
- data/lib/contrast/agent/hooks/at_exit_hook.rb +44 -0
- data/lib/contrast/agent/hooks/tracepoint_hook.rb +57 -0
- data/lib/contrast/agent/inventory/database_config.rb +175 -0
- data/lib/contrast/agent/inventory/dependencies.rb +52 -0
- data/lib/contrast/agent/inventory/dependency_analysis.rb +34 -0
- data/lib/contrast/agent/inventory/dependency_usage_analysis.rb +120 -0
- data/lib/contrast/agent/inventory/inventory.rb +14 -0
- data/lib/contrast/agent/inventory/policy/datastores.rb +51 -0
- data/lib/contrast/agent/inventory/policy/policy.rb +5 -5
- data/lib/contrast/agent/inventory/policy/trigger_node.rb +2 -2
- data/lib/contrast/agent/middleware/middleware.rb +214 -0
- data/lib/contrast/agent/middleware/static_analysis.rb +51 -0
- data/lib/contrast/agent/patching/policy/after_load_patch.rb +22 -11
- data/lib/contrast/agent/patching/policy/after_load_patcher.rb +103 -52
- data/lib/contrast/agent/patching/policy/method_policy.rb +38 -62
- data/lib/contrast/agent/patching/policy/method_policy_extend.rb +117 -0
- data/lib/contrast/agent/patching/policy/module_policy.rb +27 -47
- data/lib/contrast/agent/patching/policy/patch.rb +129 -254
- data/lib/contrast/agent/patching/policy/patch_status.rb +21 -43
- data/lib/contrast/agent/patching/policy/patcher.rb +125 -159
- data/lib/contrast/agent/patching/policy/policy.rb +63 -58
- data/lib/contrast/agent/patching/policy/policy_node.rb +55 -37
- data/lib/contrast/agent/patching/policy/trigger_node.rb +32 -16
- data/lib/contrast/agent/protect/exploitable_collection.rb +38 -0
- data/lib/contrast/agent/protect/input_analyzer/input_analyzer.rb +165 -0
- data/lib/contrast/agent/protect/input_analyzer/worth_watching_analyzer.rb +122 -0
- data/lib/contrast/agent/protect/policy/applies_command_injection_rule.rb +67 -0
- data/lib/contrast/agent/protect/policy/applies_deserialization_rule.rb +97 -0
- data/lib/contrast/agent/protect/policy/applies_no_sqli_rule.rb +72 -0
- data/lib/contrast/agent/protect/policy/applies_path_traversal_rule.rb +141 -0
- data/lib/contrast/agent/protect/policy/applies_sqli_rule.rb +58 -0
- data/lib/contrast/agent/protect/policy/applies_xxe_rule.rb +125 -0
- data/lib/contrast/agent/protect/policy/policy.rb +10 -10
- data/lib/contrast/agent/protect/policy/rule_applicator.rb +119 -0
- data/lib/contrast/agent/protect/policy/trigger_node.rb +2 -2
- data/lib/contrast/agent/protect/rule/base.rb +274 -173
- data/lib/contrast/agent/protect/rule/bot_blocker/bot_blocker.rb +89 -0
- data/lib/contrast/agent/protect/rule/bot_blocker/bot_blocker_input_classification.rb +98 -0
- data/lib/contrast/agent/protect/rule/cmdi/cmd_injection.rb +86 -0
- data/lib/contrast/agent/protect/rule/cmdi/cmdi_backdoors.rb +90 -0
- data/lib/contrast/agent/protect/rule/cmdi/cmdi_base_rule.rb +170 -0
- data/lib/contrast/agent/protect/rule/cmdi/cmdi_chained_command.rb +63 -0
- data/lib/contrast/agent/protect/rule/cmdi/cmdi_dangerous_path.rb +62 -0
- data/lib/contrast/agent/protect/rule/cmdi/cmdi_input_classification.rb +27 -0
- data/lib/contrast/agent/protect/rule/default_scanner.rb +69 -25
- data/lib/contrast/agent/protect/rule/{deserialization.rb → deserialization/deserialization.rb} +29 -24
- data/lib/contrast/agent/protect/rule/no_sqli/mongo_no_sql_scanner.rb +2 -3
- data/lib/contrast/agent/protect/rule/no_sqli/no_sqli.rb +105 -0
- data/lib/contrast/agent/protect/rule/no_sqli/no_sqli_input_classification.rb +226 -0
- data/lib/contrast/agent/protect/rule/{path_traversal.rb → path_traversal/path_traversal.rb} +48 -55
- data/lib/contrast/agent/protect/rule/path_traversal/path_traversal_input_classification.rb +61 -0
- data/lib/contrast/agent/protect/rule/path_traversal/path_traversal_semantic_security_bypass.rb +139 -0
- data/lib/contrast/agent/protect/rule/sqli/default_sql_scanner.rb +1 -1
- data/lib/contrast/agent/protect/rule/sqli/mysql_sql_scanner.rb +1 -1
- data/lib/contrast/agent/protect/rule/sqli/postgres_sql_scanner.rb +2 -3
- data/lib/contrast/agent/protect/rule/sqli/sql_sample_builder.rb +154 -0
- data/lib/contrast/agent/protect/rule/sqli/sqli.rb +101 -0
- data/lib/contrast/agent/protect/rule/sqli/sqli_base_rule.rb +37 -0
- data/lib/contrast/agent/protect/rule/sqli/sqli_input_classification.rb +27 -0
- data/lib/contrast/agent/protect/rule/sqli/sqli_semantic/sqli_dangerous_functions.rb +67 -0
- data/lib/contrast/agent/protect/rule/sqli/sqlite_sql_scanner.rb +1 -1
- data/lib/contrast/agent/protect/rule/unsafe_file_upload/unsafe_file_upload.rb +56 -0
- data/lib/contrast/agent/protect/rule/unsafe_file_upload/unsafe_file_upload_input_classification.rb +62 -0
- data/lib/contrast/agent/protect/rule/utils/builders.rb +111 -0
- data/lib/contrast/agent/protect/rule/utils/filters.rb +110 -0
- data/lib/contrast/agent/protect/rule/xss/reflected_xss_input_classification.rb +58 -0
- data/lib/contrast/agent/protect/rule/xss/xss.rb +50 -0
- data/lib/contrast/agent/protect/rule/xxe/entity_wrapper.rb +25 -21
- data/lib/contrast/agent/protect/rule/xxe/xxe.rb +149 -0
- data/lib/contrast/agent/protect/rule.rb +20 -27
- data/lib/contrast/agent/reactions/disable_reaction.rb +20 -0
- data/lib/contrast/agent/reporting/attack_result/attack_result.rb +71 -0
- data/lib/contrast/agent/reporting/attack_result/rasp_rule_sample.rb +86 -0
- data/lib/contrast/agent/reporting/attack_result/response_type.rb +29 -0
- data/lib/contrast/agent/reporting/attack_result/user_input.rb +97 -0
- data/lib/contrast/agent/reporting/connection_status.rb +45 -0
- data/lib/contrast/agent/reporting/details/bot_blocker_details.rb +29 -0
- data/lib/contrast/agent/reporting/details/cmd_injection_details.rb +30 -0
- data/lib/contrast/agent/reporting/details/details.rb +17 -0
- data/lib/contrast/agent/reporting/details/ip_denylist_details.rb +35 -0
- data/lib/contrast/agent/reporting/details/no_sqli_details.rb +36 -0
- data/lib/contrast/agent/reporting/details/path_traversal_details.rb +24 -0
- data/lib/contrast/agent/reporting/details/path_traversal_semantic_analysis_details.rb +32 -0
- data/lib/contrast/agent/reporting/details/protect_rule_details.rb +17 -0
- data/lib/contrast/agent/reporting/details/sqli_dangerous_functions.rb +22 -0
- data/lib/contrast/agent/reporting/details/sqli_details.rb +36 -0
- data/lib/contrast/agent/reporting/details/untrusted_deserialization_details.rb +27 -0
- data/lib/contrast/agent/reporting/details/virtual_patch_details.rb +30 -0
- data/lib/contrast/agent/reporting/details/xss_details.rb +33 -0
- data/lib/contrast/agent/reporting/details/xss_match.rb +30 -0
- data/lib/contrast/agent/reporting/details/xxe_details.rb +36 -0
- data/lib/contrast/agent/reporting/details/xxe_match.rb +25 -0
- data/lib/contrast/agent/reporting/details/xxe_wrapper.rb +25 -0
- data/lib/contrast/agent/reporting/input_analysis/details/bot_blocker_details.rb +27 -0
- data/lib/contrast/agent/reporting/input_analysis/details/protect_rule_details.rb +15 -0
- data/lib/contrast/agent/reporting/input_analysis/input_analysis.rb +55 -0
- data/lib/contrast/agent/reporting/input_analysis/input_analysis_result.rb +129 -0
- data/lib/contrast/agent/reporting/input_analysis/input_type.rb +44 -0
- data/lib/contrast/agent/reporting/input_analysis/score_level.rb +21 -0
- data/lib/contrast/agent/reporting/masker/masker.rb +258 -0
- data/lib/contrast/agent/reporting/masker/masker_utils.rb +33 -0
- data/lib/contrast/agent/reporting/report.rb +32 -0
- data/lib/contrast/agent/reporting/reporter.rb +163 -0
- data/lib/contrast/agent/reporting/reporting_events/agent_startup.rb +34 -0
- data/lib/contrast/agent/reporting/reporting_events/application_activity.rb +120 -0
- data/lib/contrast/agent/reporting/reporting_events/application_defend_activity.rb +101 -0
- data/lib/contrast/agent/reporting/reporting_events/application_defend_attack_activity.rb +79 -0
- data/lib/contrast/agent/reporting/reporting_events/application_defend_attack_sample.rb +101 -0
- data/lib/contrast/agent/reporting/reporting_events/application_defend_attack_sample_activity.rb +74 -0
- data/lib/contrast/agent/reporting/reporting_events/application_defend_attack_sample_stack.rb +22 -0
- data/lib/contrast/agent/reporting/reporting_events/application_defend_attacker_activity.rb +78 -0
- data/lib/contrast/agent/reporting/reporting_events/application_inventory.rb +43 -0
- data/lib/contrast/agent/reporting/reporting_events/application_inventory_activity.rb +57 -0
- data/lib/contrast/agent/reporting/reporting_events/application_reporting_event.rb +37 -0
- data/lib/contrast/agent/reporting/reporting_events/application_settings.rb +40 -0
- data/lib/contrast/agent/reporting/reporting_events/application_startup.rb +44 -0
- data/lib/contrast/agent/reporting/reporting_events/application_startup_instrumentation.rb +27 -0
- data/lib/contrast/agent/reporting/reporting_events/application_update.rb +55 -0
- data/lib/contrast/agent/reporting/reporting_events/architecture_component.rb +66 -0
- data/lib/contrast/agent/reporting/reporting_events/discovered_route.rb +122 -0
- data/lib/contrast/agent/reporting/reporting_events/finding.rb +201 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event.rb +442 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_object.rb +96 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_parent_object.rb +45 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_property.rb +47 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_signature.rb +99 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_source.rb +63 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_stack.rb +65 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_taint_range.rb +67 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_taint_range_tags.rb +105 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_request.rb +126 -0
- data/lib/contrast/agent/reporting/reporting_events/library_discovery.rb +89 -0
- data/lib/contrast/agent/reporting/reporting_events/library_usage_observation.rb +48 -0
- data/lib/contrast/agent/reporting/reporting_events/observed_library_usage.rb +37 -0
- data/lib/contrast/agent/reporting/reporting_events/observed_route.rb +83 -0
- data/lib/contrast/agent/reporting/reporting_events/poll.rb +23 -0
- data/lib/contrast/agent/reporting/reporting_events/preflight.rb +52 -0
- data/lib/contrast/agent/reporting/reporting_events/preflight_message.rb +66 -0
- data/lib/contrast/agent/reporting/reporting_events/reportable_hash.rb +47 -0
- data/lib/contrast/agent/reporting/reporting_events/reporting_event.rb +35 -0
- data/lib/contrast/agent/reporting/reporting_events/route_coverage.rb +87 -0
- data/lib/contrast/agent/reporting/reporting_events/route_discovery.rb +59 -0
- data/lib/contrast/agent/reporting/reporting_events/route_discovery_observation.rb +49 -0
- data/lib/contrast/agent/reporting/reporting_events/server_reporting_event.rb +35 -0
- data/lib/contrast/agent/reporting/reporting_events/server_settings.rb +40 -0
- data/lib/contrast/agent/reporting/reporting_utilities/audit.rb +133 -0
- data/lib/contrast/agent/reporting/reporting_utilities/build_preflight.rb +38 -0
- data/lib/contrast/agent/reporting/reporting_utilities/endpoints.rb +176 -0
- data/lib/contrast/agent/reporting/reporting_utilities/headers.rb +57 -0
- data/lib/contrast/agent/reporting/reporting_utilities/ng_response_extractor.rb +137 -0
- data/lib/contrast/agent/reporting/reporting_utilities/reporter_client.rb +138 -0
- data/lib/contrast/agent/reporting/reporting_utilities/reporter_client_utils.rb +161 -0
- data/lib/contrast/agent/reporting/reporting_utilities/reporting_storage.rb +66 -0
- data/lib/contrast/agent/reporting/reporting_utilities/response.rb +98 -0
- data/lib/contrast/agent/reporting/reporting_utilities/response_extractor.rb +149 -0
- data/lib/contrast/agent/reporting/reporting_utilities/response_handler.rb +118 -0
- data/lib/contrast/agent/reporting/reporting_utilities/response_handler_mode.rb +63 -0
- data/lib/contrast/agent/reporting/reporting_utilities/response_handler_utils.rb +393 -0
- data/lib/contrast/agent/reporting/reporting_workers/application_server_worker.rb +46 -0
- data/lib/contrast/agent/reporting/reporting_workers/reporter_heartbeat.rb +51 -0
- data/lib/contrast/agent/reporting/reporting_workers/reporting_workers.rb +14 -0
- data/lib/contrast/agent/reporting/reporting_workers/server_settings_worker.rb +46 -0
- data/lib/contrast/agent/reporting/settings/application_settings.rb +61 -0
- data/lib/contrast/agent/reporting/settings/assess.rb +58 -0
- data/lib/contrast/agent/reporting/settings/assess_rule.rb +18 -0
- data/lib/contrast/agent/reporting/settings/assess_server_feature.rb +114 -0
- data/lib/contrast/agent/reporting/settings/bot_blocker.rb +68 -0
- data/lib/contrast/agent/reporting/settings/exclusion_base.rb +129 -0
- data/lib/contrast/agent/reporting/settings/exclusions.rb +86 -0
- data/lib/contrast/agent/reporting/settings/helpers.rb +101 -0
- data/lib/contrast/agent/reporting/settings/input_exclusion.rb +87 -0
- data/lib/contrast/agent/reporting/settings/ip_filter.rb +35 -0
- data/lib/contrast/agent/reporting/settings/keyword.rb +74 -0
- data/lib/contrast/agent/reporting/settings/log_enhancer.rb +65 -0
- data/lib/contrast/agent/reporting/settings/protect.rb +111 -0
- data/lib/contrast/agent/reporting/settings/protect_rule.rb +18 -0
- data/lib/contrast/agent/reporting/settings/protect_server_feature.rb +227 -0
- data/lib/contrast/agent/reporting/settings/reaction.rb +39 -0
- data/lib/contrast/agent/reporting/settings/rule_definition.rb +66 -0
- data/lib/contrast/agent/reporting/settings/sampling.rb +46 -0
- data/lib/contrast/agent/reporting/settings/sanitizer.rb +38 -0
- data/lib/contrast/agent/reporting/settings/security_logger.rb +77 -0
- data/lib/contrast/agent/reporting/settings/sensitive_data_masking.rb +118 -0
- data/lib/contrast/agent/reporting/settings/sensitive_data_masking_rule.rb +65 -0
- data/lib/contrast/agent/reporting/settings/server_features.rb +95 -0
- data/lib/contrast/agent/reporting/settings/syslog.rb +205 -0
- data/lib/contrast/agent/reporting/settings/url_exclusion.rb +18 -0
- data/lib/contrast/agent/reporting/settings/validator.rb +17 -0
- data/lib/contrast/agent/reporting/settings/virtual_patch.rb +56 -0
- data/lib/contrast/agent/reporting/settings/virtual_patch_condition.rb +47 -0
- data/lib/contrast/agent/request/request.rb +189 -0
- data/lib/contrast/agent/request/request_context.rb +143 -0
- data/lib/contrast/agent/request/request_context_extend.rb +105 -0
- data/lib/contrast/agent/request/request_handler.rb +41 -0
- data/lib/contrast/agent/response/response.rb +87 -0
- data/lib/contrast/agent/scope/scope.rb +158 -0
- data/lib/contrast/agent/telemetry/base.rb +171 -0
- data/lib/contrast/agent/telemetry/client.rb +111 -0
- data/lib/contrast/agent/telemetry/event.rb +35 -0
- data/lib/contrast/agent/telemetry/exception/base.rb +61 -0
- data/lib/contrast/agent/telemetry/exception/event.rb +46 -0
- data/lib/contrast/agent/telemetry/exception/message.rb +118 -0
- data/lib/contrast/agent/telemetry/exception/message_exception.rb +86 -0
- data/lib/contrast/agent/telemetry/exception/stack_frame.rb +67 -0
- data/lib/contrast/agent/telemetry/exception.rb +19 -0
- data/lib/contrast/agent/telemetry/hash.rb +71 -0
- data/lib/contrast/agent/telemetry/identifier.rb +153 -0
- data/lib/contrast/agent/telemetry/metric_event.rb +28 -0
- data/lib/contrast/agent/telemetry/startup_metrics_event.rb +123 -0
- data/lib/contrast/agent/telemetry/telemetry.rb +109 -0
- data/lib/contrast/agent/{thread.rb → thread/thread.rb} +4 -6
- data/lib/contrast/agent/thread/thread_watcher.rb +126 -0
- data/lib/contrast/agent/thread/worker_thread.rb +42 -0
- data/lib/contrast/agent/version.rb +2 -2
- data/lib/contrast/agent.rb +96 -57
- data/lib/contrast/agent_lib/api/command_injection.rb +46 -0
- data/lib/contrast/agent_lib/api/init.rb +95 -0
- data/lib/contrast/agent_lib/api/input_tracing.rb +265 -0
- data/lib/contrast/agent_lib/api/panic.rb +87 -0
- data/lib/contrast/agent_lib/api/path_semantic_file_security_bypass.rb +40 -0
- data/lib/contrast/agent_lib/interface.rb +245 -0
- data/lib/contrast/agent_lib/interface_base.rb +131 -0
- data/lib/contrast/agent_lib/return_types/eval_result.rb +44 -0
- data/lib/contrast/agent_lib/test.rb +29 -0
- data/lib/contrast/components/agent.rb +104 -48
- data/lib/contrast/components/api.rb +159 -0
- data/lib/contrast/components/app_context.rb +125 -98
- data/lib/contrast/components/app_context_extend.rb +53 -0
- data/lib/contrast/components/assess.rb +210 -24
- data/lib/contrast/components/assess_rules.rb +54 -0
- data/lib/contrast/components/base.rb +103 -0
- data/lib/contrast/components/config/sources.rb +95 -0
- data/lib/contrast/components/config.rb +182 -60
- data/lib/contrast/components/heap_dump.rb +77 -12
- data/lib/contrast/components/inventory.rb +37 -10
- data/lib/contrast/components/logger.rb +46 -76
- data/lib/contrast/components/polling.rb +39 -0
- data/lib/contrast/components/protect.rb +142 -16
- data/lib/contrast/components/ruby_component.rb +135 -0
- data/lib/contrast/components/rule_set.rb +52 -0
- data/lib/contrast/components/sampling.rb +156 -15
- data/lib/contrast/components/scope.rb +125 -116
- data/lib/contrast/components/security_logger.rb +36 -0
- data/lib/contrast/components/settings.rb +239 -88
- data/lib/contrast/config/api_proxy_configuration.rb +27 -0
- data/lib/contrast/config/base_configuration.rb +20 -94
- data/lib/contrast/config/certification_configuration.rb +47 -0
- data/lib/contrast/config/config.rb +48 -0
- data/lib/contrast/config/diagnostics.rb +123 -0
- data/lib/contrast/config/diagnostics_tools.rb +99 -0
- data/lib/contrast/config/effective_config.rb +131 -0
- data/lib/contrast/config/effective_config_value.rb +32 -0
- data/lib/contrast/config/env_variables.rb +18 -0
- data/lib/contrast/config/exception_configuration.rb +34 -12
- data/lib/contrast/config/protect_rule_configuration.rb +45 -24
- data/lib/contrast/config/protect_rules_configuration.rb +97 -22
- data/lib/contrast/config/request_audit_configuration.rb +57 -0
- data/lib/contrast/config/server_configuration.rb +67 -15
- data/lib/contrast/config/validate.rb +140 -0
- data/lib/contrast/config/yaml_file.rb +129 -0
- data/lib/contrast/config.rb +6 -22
- data/lib/contrast/configuration.rb +241 -109
- data/lib/contrast/extension/assess/array.rb +75 -0
- data/lib/contrast/extension/assess/erb.rb +61 -0
- data/lib/contrast/extension/assess/eval_trigger.rb +47 -0
- data/lib/contrast/{extensions/ruby_core → extension}/assess/exec_trigger.rb +9 -21
- data/lib/contrast/extension/assess/fiber.rb +95 -0
- data/lib/contrast/extension/assess/hash.rb +33 -0
- data/lib/contrast/extension/assess/kernel.rb +124 -0
- data/lib/contrast/extension/assess/marshal.rb +80 -0
- data/lib/contrast/extension/assess/regexp.rb +71 -0
- data/lib/contrast/extension/assess/string.rb +85 -0
- data/lib/contrast/extension/assess.rb +47 -0
- data/lib/contrast/{extensions/ruby_core → extension}/delegator.rb +3 -1
- data/lib/contrast/extension/extension.rb +59 -0
- data/lib/contrast/extension/inventory.rb +21 -0
- data/lib/contrast/{extensions/ruby_core → extension}/module.rb +2 -3
- data/lib/contrast/extension/object.rb +19 -0
- data/lib/contrast/extension/protect/psych.rb +7 -0
- data/lib/contrast/{extensions/ruby_core → extension}/protect.rb +6 -6
- data/lib/contrast/extension/thread.rb +50 -0
- data/lib/contrast/framework/base_support.rb +69 -54
- data/lib/contrast/framework/grape/support.rb +176 -0
- data/lib/contrast/framework/manager.rb +112 -60
- data/lib/contrast/framework/manager_extend.rb +50 -0
- data/lib/contrast/framework/rack/patch/session_cookie.rb +108 -0
- data/lib/contrast/framework/rack/patch/support.rb +26 -0
- data/lib/contrast/framework/rack/support.rb +23 -0
- data/lib/contrast/framework/rails/patch/action_controller_live_buffer.rb +46 -0
- data/lib/contrast/framework/rails/patch/assess_configuration.rb +98 -0
- data/lib/contrast/framework/rails/patch/rails_application_configuration.rb +31 -0
- data/lib/contrast/framework/rails/patch/support.rb +46 -0
- data/lib/contrast/framework/rails/railtie.rb +33 -0
- data/lib/contrast/framework/rails/support.rb +187 -0
- data/lib/contrast/framework/sinatra/patch/encrypted_session_cookie.rb +39 -0
- data/lib/contrast/framework/sinatra/support.rb +162 -0
- data/lib/contrast/funchook/funchook.rb +44 -0
- data/lib/contrast/logger/aliased_logging.rb +158 -0
- data/lib/contrast/logger/application.rb +84 -0
- data/lib/contrast/logger/cef_log.rb +169 -0
- data/lib/contrast/logger/format.rb +61 -0
- data/lib/contrast/logger/log.rb +90 -0
- data/lib/contrast/logger/request.rb +25 -0
- data/lib/contrast/logger/time.rb +57 -0
- data/lib/contrast/security_exception.rb +2 -2
- data/lib/contrast/tasks/config.rb +33 -0
- data/lib/contrast/utils/assess/event_limit_utils.rb +134 -0
- data/lib/contrast/utils/assess/object_store.rb +36 -0
- data/lib/contrast/utils/assess/propagation_method_utils.rb +155 -0
- data/lib/contrast/utils/assess/property/tagged_utils.rb +165 -0
- data/lib/contrast/utils/assess/sampling_util.rb +11 -17
- data/lib/contrast/utils/assess/source_method_utils.rb +74 -0
- data/lib/contrast/utils/assess/split_utils.rb +23 -0
- data/lib/contrast/utils/assess/tracking_util.rb +96 -18
- data/lib/contrast/utils/assess/trigger_method_utils.rb +132 -0
- data/lib/contrast/utils/class_util.rb +80 -48
- data/lib/contrast/utils/duck_utils.rb +18 -9
- data/lib/contrast/utils/env_configuration_item.rb +4 -3
- data/lib/contrast/utils/findings.rb +66 -0
- data/lib/contrast/utils/hash_digest.rb +52 -99
- data/lib/contrast/utils/hash_digest_extend.rb +129 -0
- data/lib/contrast/utils/head_dump_utils_extend.rb +74 -0
- data/lib/contrast/utils/heap_dump_util.rb +44 -88
- data/lib/contrast/utils/input_classification_base.rb +169 -0
- data/lib/contrast/utils/invalid_configuration_util.rb +31 -45
- data/lib/contrast/utils/io_util.rb +47 -51
- data/lib/contrast/utils/job_servers_running.rb +21 -11
- data/lib/contrast/utils/log_utils.rb +254 -0
- data/lib/contrast/utils/lru_cache.rb +48 -0
- data/lib/contrast/utils/metrics_hash.rb +59 -0
- data/lib/contrast/utils/middleware_utils.rb +97 -0
- data/lib/contrast/utils/net_http_base.rb +173 -0
- data/lib/contrast/utils/object_share.rb +8 -48
- data/lib/contrast/utils/os.rb +14 -24
- data/lib/contrast/utils/patching/policy/patch_utils.rb +175 -0
- data/lib/contrast/utils/patching/policy/patcher_utils.rb +54 -0
- data/lib/contrast/utils/reporting/application_activity_batch_utils.rb +89 -0
- data/lib/contrast/utils/request_utils.rb +96 -0
- data/lib/contrast/utils/resource_loader.rb +2 -2
- data/lib/contrast/utils/response_utils.rb +79 -0
- data/lib/contrast/utils/routes_sent.rb +63 -0
- data/lib/contrast/utils/sha256_builder.rb +9 -21
- data/lib/contrast/utils/silence_maker.rb +16 -0
- data/lib/contrast/utils/stack_trace_utils.rb +68 -184
- data/lib/contrast/utils/string_utils.rb +82 -52
- data/lib/contrast/utils/tag_util.rb +58 -44
- data/lib/contrast/utils/thread_tracker.rb +27 -23
- data/lib/contrast/utils/timer.rb +20 -55
- data/lib/contrast-agent.rb +2 -2
- data/lib/contrast.rb +106 -43
- data/resources/assess/policy.json +481 -120
- data/resources/deadzone/policy.json +280 -10
- data/resources/inventory/policy.json +2 -2
- data/resources/protect/policy.json +36 -17
- data/ruby-agent.gemspec +116 -46
- data/sonar-project.properties +9 -0
- metadata +694 -317
- data/exe/contrast_service +0 -29
- data/ext/cs__assess_active_record_named/cs__active_record_named.c +0 -47
- data/ext/cs__assess_active_record_named/cs__active_record_named.h +0 -10
- data/ext/cs__assess_active_record_named/extconf.rb +0 -2
- data/ext/cs__assess_regexp_track/cs__assess_regexp_track.c +0 -63
- data/ext/cs__assess_regexp_track/cs__assess_regexp_track.h +0 -29
- data/ext/cs__assess_regexp_track/extconf.rb +0 -2
- data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.c +0 -31
- data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.h +0 -13
- data/ext/cs__assess_string_interpolation26/extconf.rb +0 -2
- data/ext/cs__protect_kernel/cs__protect_kernel.c +0 -37
- data/ext/cs__protect_kernel/cs__protect_kernel.h +0 -11
- data/ext/cs__protect_kernel/extconf.rb +0 -2
- data/funchook/Makefile +0 -29
- data/funchook/autom4te.cache/output.0 +0 -4976
- data/funchook/autom4te.cache/requests +0 -78
- data/funchook/autom4te.cache/traces.0 +0 -364
- data/funchook/config.log +0 -490
- data/funchook/config.status +0 -1016
- data/funchook/configure +0 -4976
- data/funchook/src/Makefile +0 -70
- data/funchook/src/config.h +0 -101
- data/funchook/src/config.h.in +0 -100
- data/funchook/src/decoder.o +0 -0
- data/funchook/src/distorm.o +0 -0
- data/funchook/src/funchook.o +0 -0
- data/funchook/src/funchook_io.o +0 -0
- data/funchook/src/funchook_syscall.o +0 -0
- data/funchook/src/funchook_unix.o +0 -0
- data/funchook/src/funchook_x86.o +0 -0
- data/funchook/src/instructions.o +0 -0
- data/funchook/src/insts.o +0 -0
- data/funchook/src/libfunchook.so +0 -0
- data/funchook/src/mnemonics.o +0 -0
- data/funchook/src/operands.o +0 -0
- data/funchook/src/os_func.o +0 -0
- data/funchook/src/os_func_unix.o +0 -0
- data/funchook/src/prefix.o +0 -0
- data/funchook/src/printf_base.o +0 -0
- data/funchook/src/textdefs.o +0 -0
- data/funchook/src/wstring.o +0 -0
- data/funchook/test/Makefile +0 -43
- data/funchook/test/funchook_test +0 -0
- data/funchook/test/libfunchook_test.so +0 -0
- data/funchook/test/test_main.o +0 -0
- data/funchook/test/x86_64_test.o +0 -0
- data/lib/contrast/agent/assess/adjusted_span.rb +0 -25
- data/lib/contrast/agent/assess/contrast_event.rb +0 -399
- data/lib/contrast/agent/assess/frozen_properties.rb +0 -41
- data/lib/contrast/agent/assess/insulator.rb +0 -53
- data/lib/contrast/agent/assess/policy/rewriter_patch.rb +0 -80
- data/lib/contrast/agent/assess/rule/base.rb +0 -72
- data/lib/contrast/agent/assess/rule/csrf/csrf_action.rb +0 -28
- data/lib/contrast/agent/assess/rule/csrf/csrf_applicator.rb +0 -73
- data/lib/contrast/agent/assess/rule/csrf/csrf_watcher.rb +0 -132
- data/lib/contrast/agent/assess/rule/csrf.rb +0 -66
- data/lib/contrast/agent/assess/rule/redos.rb +0 -68
- data/lib/contrast/agent/assess/rule/response_scanning_rule.rb +0 -47
- data/lib/contrast/agent/assess/rule/response_watcher.rb +0 -36
- data/lib/contrast/agent/assess/rule/watcher.rb +0 -36
- data/lib/contrast/agent/assess/rule.rb +0 -18
- data/lib/contrast/agent/assess.rb +0 -44
- data/lib/contrast/agent/at_exit_hook.rb +0 -33
- data/lib/contrast/agent/class_reopener.rb +0 -238
- data/lib/contrast/agent/disable_reaction.rb +0 -24
- data/lib/contrast/agent/exclusion_matcher.rb +0 -190
- data/lib/contrast/agent/feature_state.rb +0 -379
- data/lib/contrast/agent/logger_manager.rb +0 -116
- data/lib/contrast/agent/middleware.rb +0 -350
- data/lib/contrast/agent/protect/rule/base_service.rb +0 -88
- data/lib/contrast/agent/protect/rule/cmd_injection.rb +0 -156
- data/lib/contrast/agent/protect/rule/csrf/csrf_evaluator.rb +0 -103
- data/lib/contrast/agent/protect/rule/csrf/csrf_token_injector.rb +0 -85
- data/lib/contrast/agent/protect/rule/csrf.rb +0 -118
- data/lib/contrast/agent/protect/rule/http_method_tampering.rb +0 -80
- data/lib/contrast/agent/protect/rule/no_sqli.rb +0 -101
- data/lib/contrast/agent/protect/rule/sqli.rb +0 -101
- data/lib/contrast/agent/protect/rule/unsafe_file_upload.rb +0 -20
- data/lib/contrast/agent/protect/rule/xss.rb +0 -24
- data/lib/contrast/agent/protect/rule/xxe.rb +0 -120
- data/lib/contrast/agent/railtie.rb +0 -36
- data/lib/contrast/agent/reaction_processor.rb +0 -47
- data/lib/contrast/agent/request.rb +0 -475
- data/lib/contrast/agent/request_context.rb +0 -225
- data/lib/contrast/agent/require_state.rb +0 -61
- data/lib/contrast/agent/response.rb +0 -215
- data/lib/contrast/agent/rewriter.rb +0 -245
- data/lib/contrast/agent/scope.rb +0 -125
- data/lib/contrast/agent/service_heartbeat.rb +0 -40
- data/lib/contrast/agent/settings_state.rb +0 -152
- data/lib/contrast/agent/socket_client.rb +0 -128
- data/lib/contrast/agent/tracepoint_hook.rb +0 -51
- data/lib/contrast/api/connection_status.rb +0 -49
- data/lib/contrast/api/dtm_pb.rb +0 -718
- data/lib/contrast/api/settings_pb.rb +0 -416
- data/lib/contrast/api/socket.rb +0 -43
- data/lib/contrast/api/speedracer.rb +0 -186
- data/lib/contrast/api/tcp_socket.rb +0 -31
- data/lib/contrast/api/unix_socket.rb +0 -25
- data/lib/contrast/api.rb +0 -18
- data/lib/contrast/common_agent_configuration.rb +0 -86
- data/lib/contrast/components/contrast_service.rb +0 -117
- data/lib/contrast/components/interface.rb +0 -178
- data/lib/contrast/config/agent_configuration.rb +0 -24
- data/lib/contrast/config/application_configuration.rb +0 -27
- data/lib/contrast/config/assess_configuration.rb +0 -22
- data/lib/contrast/config/assess_rules_configuration.rb +0 -18
- data/lib/contrast/config/default_value.rb +0 -16
- data/lib/contrast/config/heap_dump_configuration.rb +0 -23
- data/lib/contrast/config/inventory_configuration.rb +0 -20
- data/lib/contrast/config/logger_configuration.rb +0 -20
- data/lib/contrast/config/protect_configuration.rb +0 -20
- data/lib/contrast/config/root_configuration.rb +0 -26
- data/lib/contrast/config/ruby_configuration.rb +0 -44
- data/lib/contrast/config/sampling_configuration.rb +0 -22
- data/lib/contrast/config/service_configuration.rb +0 -22
- data/lib/contrast/delegators/application_update.rb +0 -32
- data/lib/contrast/delegators.rb +0 -9
- data/lib/contrast/extensions/framework/rack/cookie.rb +0 -24
- data/lib/contrast/extensions/framework/rack/request.rb +0 -24
- data/lib/contrast/extensions/framework/rack/response.rb +0 -23
- data/lib/contrast/extensions/framework/rails/action_controller_railties_helper_inherited.rb +0 -20
- data/lib/contrast/extensions/framework/rails/active_record.rb +0 -26
- data/lib/contrast/extensions/framework/rails/active_record_named.rb +0 -53
- data/lib/contrast/extensions/framework/rails/active_record_time_zone_inherited.rb +0 -21
- data/lib/contrast/extensions/framework/rails/buffer.rb +0 -28
- data/lib/contrast/extensions/framework/rails/configuration.rb +0 -27
- data/lib/contrast/extensions/framework/sinatra/base.rb +0 -59
- data/lib/contrast/extensions/ruby_core/assess/array.rb +0 -59
- data/lib/contrast/extensions/ruby_core/assess/assess_extension.rb +0 -143
- data/lib/contrast/extensions/ruby_core/assess/basic_object.rb +0 -15
- data/lib/contrast/extensions/ruby_core/assess/erb.rb +0 -42
- data/lib/contrast/extensions/ruby_core/assess/fiber.rb +0 -124
- data/lib/contrast/extensions/ruby_core/assess/hash.rb +0 -22
- data/lib/contrast/extensions/ruby_core/assess/kernel.rb +0 -95
- data/lib/contrast/extensions/ruby_core/assess/module.rb +0 -14
- data/lib/contrast/extensions/ruby_core/assess/regexp.rb +0 -206
- data/lib/contrast/extensions/ruby_core/assess/string.rb +0 -75
- data/lib/contrast/extensions/ruby_core/assess/tilt_template_trigger.rb +0 -73
- data/lib/contrast/extensions/ruby_core/assess/xpath_library_trigger.rb +0 -40
- data/lib/contrast/extensions/ruby_core/assess.rb +0 -52
- data/lib/contrast/extensions/ruby_core/eval_trigger.rb +0 -52
- data/lib/contrast/extensions/ruby_core/inventory/datastores.rb +0 -37
- data/lib/contrast/extensions/ruby_core/inventory.rb +0 -22
- data/lib/contrast/extensions/ruby_core/protect/applies_command_injection_rule.rb +0 -72
- data/lib/contrast/extensions/ruby_core/protect/applies_deserialization_rule.rb +0 -60
- data/lib/contrast/extensions/ruby_core/protect/applies_no_sqli_rule.rb +0 -83
- data/lib/contrast/extensions/ruby_core/protect/applies_path_traversal_rule.rb +0 -123
- data/lib/contrast/extensions/ruby_core/protect/applies_sqli_rule.rb +0 -65
- data/lib/contrast/extensions/ruby_core/protect/applies_xxe_rule.rb +0 -143
- data/lib/contrast/extensions/ruby_core/protect/kernel.rb +0 -30
- data/lib/contrast/extensions/ruby_core/protect/psych.rb +0 -7
- data/lib/contrast/extensions/ruby_core/thread.rb +0 -31
- data/lib/contrast/framework/platform_version.rb +0 -21
- data/lib/contrast/framework/rails_support.rb +0 -88
- data/lib/contrast/framework/sinatra_application_helper.rb +0 -49
- data/lib/contrast/framework/sinatra_support.rb +0 -94
- data/lib/contrast/framework/view_technologies_descriptor.rb +0 -20
- data/lib/contrast/internal_exception.rb +0 -8
- data/lib/contrast/tasks/service.rb +0 -95
- data/lib/contrast/utils/boolean_util.rb +0 -33
- data/lib/contrast/utils/cache.rb +0 -69
- data/lib/contrast/utils/comment_range.rb +0 -19
- data/lib/contrast/utils/data_store_util.rb +0 -23
- data/lib/contrast/utils/environment_util.rb +0 -82
- data/lib/contrast/utils/freeze_util.rb +0 -32
- data/lib/contrast/utils/gemfile_reader.rb +0 -191
- data/lib/contrast/utils/inventory_util.rb +0 -126
- data/lib/contrast/utils/performs_logging.rb +0 -152
- data/lib/contrast/utils/preflight_util.rb +0 -13
- data/lib/contrast/utils/prevent_serialization.rb +0 -52
- data/lib/contrast/utils/rack_assess_session_cookie.rb +0 -104
- data/lib/contrast/utils/rails_assess_configuration.rb +0 -95
- data/lib/contrast/utils/random_util.rb +0 -22
- data/lib/contrast/utils/ruby_ast_rewriter.rb +0 -74
- data/lib/contrast/utils/service_response_util.rb +0 -110
- data/lib/contrast/utils/service_sender_util.rb +0 -106
- data/lib/contrast/utils/sinatra_helper.rb +0 -55
- data/resources/csrf/inject.js +0 -44
- data/resources/factory-bot-spec/spec_helper.rb +0 -30
- data/resources/rubocops/kernel/catch_cop.rb +0 -37
- data/resources/rubocops/kernel/require_cop.rb +0 -37
- data/resources/rubocops/kernel/require_relative_cop.rb +0 -33
- data/resources/rubocops/module/autoload_cop.rb +0 -37
- data/resources/rubocops/module/const_defined_cop.rb +0 -37
- data/resources/rubocops/module/const_get_cop.rb +0 -37
- data/resources/rubocops/module/const_set_cop.rb +0 -37
- data/resources/rubocops/module/constants_cop.rb +0 -37
- data/resources/rubocops/module/name_cop.rb +0 -37
- data/resources/rubocops/object/class_cop.rb +0 -37
- data/resources/rubocops/object/freeze_cop.rb +0 -37
- data/resources/rubocops/object/frozen_cop.rb +0 -37
- data/resources/rubocops/object/is_a_cop.rb +0 -37
- data/resources/rubocops/object/method_cop.rb +0 -37
- data/resources/rubocops/object/respond_to_cop.rb +0 -37
- data/resources/rubocops/object/singleton_class_cop.rb +0 -37
- data/resources/rubocops/regexp/spelling_cop.rb +0 -44
- data/resources/rubocops/thread/new_cop.rb +0 -39
- data/resources/ruby-spec/ancestors_spec.rb +0 -70
- data/resources/ruby-spec/modulo_spec.rb +0 -831
- data/resources/ruby-spec/parameters_spec.rb +0 -261
- data/resources/ruby-spec/ruby_spec_spec_helper.rb +0 -35
- data/service_executables/.gitkeep +0 -0
- data/service_executables/VERSION +0 -1
- data/service_executables/linux/contrast-service +0 -0
- data/service_executables/mac/contrast-service +0 -0
- data/shared_libraries/funchook.h +0 -123
- data/shared_libraries/libfunchook.so +0 -0
@@ -1,831 +0,0 @@
|
|
1
|
-
require_relative '../../spec_helper'
|
2
|
-
require_relative '../kernel/shared/sprintf'
|
3
|
-
require_relative '../kernel/shared/sprintf_encoding'
|
4
|
-
require_relative 'fixtures/classes'
|
5
|
-
require_relative '../../shared/hash/key_error'
|
6
|
-
|
7
|
-
describe "String#%" do
|
8
|
-
it_behaves_like :kernel_sprintf, -> format, *args {
|
9
|
-
format % args
|
10
|
-
}
|
11
|
-
|
12
|
-
it_behaves_like :kernel_sprintf_encoding, -> format, *args {
|
13
|
-
format % args
|
14
|
-
}
|
15
|
-
end
|
16
|
-
|
17
|
-
# TODO: these specs are mostly redundant with kernel/shared/sprintf.rb specs.
|
18
|
-
# These specs should be moved there and deduplicated.
|
19
|
-
describe "String#%" do
|
20
|
-
context "when key is missing from passed-in hash" do
|
21
|
-
it_behaves_like :key_error, -> obj, key { "%{#{key}}" % obj }, { a: 5 }
|
22
|
-
end
|
23
|
-
|
24
|
-
it "formats multiple expressions" do
|
25
|
-
("%b %x %d %s" % [10, 10, 10, 10]).should == "1010 a 10 10"
|
26
|
-
end
|
27
|
-
|
28
|
-
it "formats expressions mid string" do
|
29
|
-
("hello %s!" % "world").should == "hello world!"
|
30
|
-
end
|
31
|
-
|
32
|
-
it "formats %% into %" do
|
33
|
-
("%d%% %s" % [10, "of chickens!"]).should == "10% of chickens!"
|
34
|
-
end
|
35
|
-
|
36
|
-
describe "output's encoding" do
|
37
|
-
it "is the same as the format string if passed value is encoding-compatible" do
|
38
|
-
[Encoding::BINARY, Encoding::US_ASCII, Encoding::UTF_8, Encoding::SHIFT_JIS].each do |encoding|
|
39
|
-
("hello %s!".encode(encoding) % "world").encoding.should == encoding
|
40
|
-
end
|
41
|
-
end
|
42
|
-
|
43
|
-
it "negotiates a compatible encoding if necessary" do
|
44
|
-
("hello %s" % 195.chr).encoding.should == Encoding::BINARY
|
45
|
-
("hello %s".encode("shift_jis") % "wörld").encoding.should == Encoding::UTF_8
|
46
|
-
end
|
47
|
-
|
48
|
-
it "raises if a compatible encoding can't be found" do
|
49
|
-
-> { "hello %s".encode("utf-8") % "world".encode("UTF-16LE") }.should raise_error(Encoding::CompatibilityError)
|
50
|
-
end
|
51
|
-
end
|
52
|
-
|
53
|
-
ruby_version_is ""..."2.5" do
|
54
|
-
it "formats single % character at the end as literal %" do
|
55
|
-
("%" % []).should == "%"
|
56
|
-
("foo%" % []).should == "foo%"
|
57
|
-
end
|
58
|
-
end
|
59
|
-
|
60
|
-
ruby_version_is "2.5" do
|
61
|
-
it "raises an error if single % appears at the end" do
|
62
|
-
-> { ("%" % []) }.should raise_error(ArgumentError)
|
63
|
-
-> { ("foo%" % [])}.should raise_error(ArgumentError)
|
64
|
-
end
|
65
|
-
end
|
66
|
-
|
67
|
-
it "formats single % character before a newline as literal %" do
|
68
|
-
("%\n" % []).should == "%\n"
|
69
|
-
("foo%\n" % []).should == "foo%\n"
|
70
|
-
("%\n.3f" % 1.2).should == "%\n.3f"
|
71
|
-
end
|
72
|
-
|
73
|
-
it "formats single % character before a NUL as literal %" do
|
74
|
-
("%\0" % []).should == "%\0"
|
75
|
-
("foo%\0" % []).should == "foo%\0"
|
76
|
-
("%\0.3f" % 1.2).should == "%\0.3f"
|
77
|
-
end
|
78
|
-
|
79
|
-
it "raises an error if single % appears anywhere else" do
|
80
|
-
-> { (" % " % []) }.should raise_error(ArgumentError)
|
81
|
-
-> { ("foo%quux" % []) }.should raise_error(ArgumentError)
|
82
|
-
end
|
83
|
-
|
84
|
-
|
85
|
-
it "raises an error if NULL or \\n appear anywhere else in the format string" do
|
86
|
-
begin
|
87
|
-
old_debug, $DEBUG = $DEBUG, false
|
88
|
-
|
89
|
-
-> { "%.\n3f" % 1.2 }.should raise_error(ArgumentError)
|
90
|
-
-> { "%.3\nf" % 1.2 }.should raise_error(ArgumentError)
|
91
|
-
-> { "%.\03f" % 1.2 }.should raise_error(ArgumentError)
|
92
|
-
-> { "%.3\0f" % 1.2 }.should raise_error(ArgumentError)
|
93
|
-
ensure
|
94
|
-
$DEBUG = old_debug
|
95
|
-
end
|
96
|
-
end
|
97
|
-
|
98
|
-
it "ignores unused arguments when $DEBUG is false" do
|
99
|
-
begin
|
100
|
-
old_debug = $DEBUG
|
101
|
-
$DEBUG = false
|
102
|
-
|
103
|
-
("" % [1, 2, 3]).should == ""
|
104
|
-
("%s" % [1, 2, 3]).should == "1"
|
105
|
-
ensure
|
106
|
-
$DEBUG = old_debug
|
107
|
-
end
|
108
|
-
end
|
109
|
-
|
110
|
-
# RUBY-569 - this segfaults
|
111
|
-
# it "raises an ArgumentError for unused arguments when $DEBUG is true" do
|
112
|
-
# begin
|
113
|
-
# old_debug = $DEBUG
|
114
|
-
# $DEBUG = true
|
115
|
-
# s = $stderr
|
116
|
-
# $stderr = IOStub.new
|
117
|
-
#
|
118
|
-
# -> { "" % [1, 2, 3] }.should raise_error(ArgumentError)
|
119
|
-
# -> { "%s" % [1, 2, 3] }.should raise_error(ArgumentError)
|
120
|
-
# ensure
|
121
|
-
# $DEBUG = old_debug
|
122
|
-
# $stderr = s
|
123
|
-
# end
|
124
|
-
# end
|
125
|
-
|
126
|
-
it "always allows unused arguments when positional argument style is used" do
|
127
|
-
begin
|
128
|
-
old_debug = $DEBUG
|
129
|
-
$DEBUG = false
|
130
|
-
|
131
|
-
("%2$s" % [1, 2, 3]).should == "2"
|
132
|
-
$DEBUG = true
|
133
|
-
("%2$s" % [1, 2, 3]).should == "2"
|
134
|
-
ensure
|
135
|
-
$DEBUG = old_debug
|
136
|
-
end
|
137
|
-
end
|
138
|
-
|
139
|
-
it "replaces trailing absolute argument specifier without type with percent sign" do
|
140
|
-
("hello %1$" % "foo").should == "hello %"
|
141
|
-
end
|
142
|
-
|
143
|
-
it "raises an ArgumentError when given invalid argument specifiers" do
|
144
|
-
-> { "%1" % [] }.should raise_error(ArgumentError)
|
145
|
-
-> { "%+" % [] }.should raise_error(ArgumentError)
|
146
|
-
-> { "%-" % [] }.should raise_error(ArgumentError)
|
147
|
-
-> { "%#" % [] }.should raise_error(ArgumentError)
|
148
|
-
-> { "%0" % [] }.should raise_error(ArgumentError)
|
149
|
-
-> { "%*" % [] }.should raise_error(ArgumentError)
|
150
|
-
-> { "%." % [] }.should raise_error(ArgumentError)
|
151
|
-
-> { "%_" % [] }.should raise_error(ArgumentError)
|
152
|
-
-> { "%0$s" % "x" }.should raise_error(ArgumentError)
|
153
|
-
-> { "%*0$s" % [5, "x"] }.should raise_error(ArgumentError)
|
154
|
-
-> { "%*1$.*0$1$s" % [1, 2, 3] }.should raise_error(ArgumentError)
|
155
|
-
end
|
156
|
-
|
157
|
-
it "raises an ArgumentError when multiple positional argument tokens are given for one format specifier" do
|
158
|
-
-> { "%1$1$s" % "foo" }.should raise_error(ArgumentError)
|
159
|
-
end
|
160
|
-
|
161
|
-
it "respects positional arguments and precision tokens given for one format specifier" do
|
162
|
-
("%2$1d" % [1, 0]).should == "0"
|
163
|
-
("%2$1d" % [0, 1]).should == "1"
|
164
|
-
|
165
|
-
("%2$.2f" % [1, 0]).should == "0.00"
|
166
|
-
("%2$.2f" % [0, 1]).should == "1.00"
|
167
|
-
end
|
168
|
-
|
169
|
-
it "allows more than one digit of position" do
|
170
|
-
("%50$d" % (0..100).to_a).should == "49"
|
171
|
-
end
|
172
|
-
|
173
|
-
it "raises an ArgumentError when multiple width star tokens are given for one format specifier" do
|
174
|
-
-> { "%**s" % [5, 5, 5] }.should raise_error(ArgumentError)
|
175
|
-
end
|
176
|
-
|
177
|
-
it "raises an ArgumentError when a width star token is seen after a width token" do
|
178
|
-
-> { "%5*s" % [5, 5] }.should raise_error(ArgumentError)
|
179
|
-
end
|
180
|
-
|
181
|
-
it "raises an ArgumentError when multiple precision tokens are given" do
|
182
|
-
-> { "%.5.5s" % 5 }.should raise_error(ArgumentError)
|
183
|
-
-> { "%.5.*s" % [5, 5] }.should raise_error(ArgumentError)
|
184
|
-
-> { "%.*.5s" % [5, 5] }.should raise_error(ArgumentError)
|
185
|
-
end
|
186
|
-
|
187
|
-
it "raises an ArgumentError when there are less arguments than format specifiers" do
|
188
|
-
("foo" % []).should == "foo"
|
189
|
-
-> { "%s" % [] }.should raise_error(ArgumentError)
|
190
|
-
-> { "%s %s" % [1] }.should raise_error(ArgumentError)
|
191
|
-
end
|
192
|
-
|
193
|
-
it "raises an ArgumentError when absolute and relative argument numbers are mixed" do
|
194
|
-
-> { "%s %1$s" % "foo" }.should raise_error(ArgumentError)
|
195
|
-
-> { "%1$s %s" % "foo" }.should raise_error(ArgumentError)
|
196
|
-
|
197
|
-
-> { "%s %2$s" % ["foo", "bar"] }.should raise_error(ArgumentError)
|
198
|
-
-> { "%2$s %s" % ["foo", "bar"] }.should raise_error(ArgumentError)
|
199
|
-
|
200
|
-
-> { "%*2$s" % [5, 5, 5] }.should raise_error(ArgumentError)
|
201
|
-
-> { "%*.*2$s" % [5, 5, 5] }.should raise_error(ArgumentError)
|
202
|
-
-> { "%*2$.*2$s" % [5, 5, 5] }.should raise_error(ArgumentError)
|
203
|
-
-> { "%*.*2$s" % [5, 5, 5] }.should raise_error(ArgumentError)
|
204
|
-
end
|
205
|
-
|
206
|
-
it "allows reuse of the one argument multiple via absolute argument numbers" do
|
207
|
-
("%1$s %1$s" % "foo").should == "foo foo"
|
208
|
-
("%1$s %2$s %1$s %2$s" % ["foo", "bar"]).should == "foo bar foo bar"
|
209
|
-
end
|
210
|
-
|
211
|
-
it "always interprets an array argument as a list of argument parameters" do
|
212
|
-
-> { "%p" % [] }.should raise_error(ArgumentError)
|
213
|
-
("%p" % [1]).should == "1"
|
214
|
-
("%p %p" % [1, 2]).should == "1 2"
|
215
|
-
end
|
216
|
-
|
217
|
-
it "always interprets an array subclass argument as a list of argument parameters" do
|
218
|
-
-> { "%p" % StringSpecs::MyArray[] }.should raise_error(ArgumentError)
|
219
|
-
("%p" % StringSpecs::MyArray[1]).should == "1"
|
220
|
-
("%p %p" % StringSpecs::MyArray[1, 2]).should == "1 2"
|
221
|
-
end
|
222
|
-
|
223
|
-
it "allows positional arguments for width star and precision star arguments" do
|
224
|
-
("%*1$.*2$3$d" % [10, 5, 1]).should == " 00001"
|
225
|
-
end
|
226
|
-
|
227
|
-
it "allows negative width to imply '-' flag" do
|
228
|
-
("%*1$.*2$3$d" % [-10, 5, 1]).should == "00001 "
|
229
|
-
("%-*1$.*2$3$d" % [10, 5, 1]).should == "00001 "
|
230
|
-
("%-*1$.*2$3$d" % [-10, 5, 1]).should == "00001 "
|
231
|
-
end
|
232
|
-
|
233
|
-
it "ignores negative precision" do
|
234
|
-
("%*1$.*2$3$d" % [10, -5, 1]).should == " 1"
|
235
|
-
end
|
236
|
-
|
237
|
-
it "allows a star to take an argument number to use as the width" do
|
238
|
-
("%1$*2$s" % ["a", 8]).should == " a"
|
239
|
-
("%1$*10$s" % ["a",0,0,0,0,0,0,0,0,8]).should == " a"
|
240
|
-
end
|
241
|
-
|
242
|
-
it "calls to_int on width star and precision star tokens" do
|
243
|
-
w = mock('10')
|
244
|
-
w.should_receive(:to_int).and_return(10)
|
245
|
-
|
246
|
-
p = mock('5')
|
247
|
-
p.should_receive(:to_int).and_return(5)
|
248
|
-
|
249
|
-
("%*.*f" % [w, p, 1]).should == " 1.00000"
|
250
|
-
|
251
|
-
|
252
|
-
w = mock('10')
|
253
|
-
w.should_receive(:to_int).and_return(10)
|
254
|
-
|
255
|
-
p = mock('5')
|
256
|
-
p.should_receive(:to_int).and_return(5)
|
257
|
-
|
258
|
-
("%*.*d" % [w, p, 1]).should == " 00001"
|
259
|
-
end
|
260
|
-
|
261
|
-
it "does not call #to_a to convert the argument" do
|
262
|
-
x = mock("string modulo to_a")
|
263
|
-
x.should_not_receive(:to_a)
|
264
|
-
x.should_receive(:to_s).and_return("x")
|
265
|
-
|
266
|
-
("%s" % x).should == "x"
|
267
|
-
end
|
268
|
-
|
269
|
-
it "calls #to_ary to convert the argument" do
|
270
|
-
x = mock("string modulo to_ary")
|
271
|
-
x.should_not_receive(:to_s)
|
272
|
-
x.should_receive(:to_ary).and_return(["x"])
|
273
|
-
|
274
|
-
("%s" % x).should == "x"
|
275
|
-
end
|
276
|
-
|
277
|
-
it "wraps the object in an Array if #to_ary returns nil" do
|
278
|
-
x = mock("string modulo to_ary")
|
279
|
-
x.should_receive(:to_ary).and_return(nil)
|
280
|
-
x.should_receive(:to_s).and_return("x")
|
281
|
-
|
282
|
-
("%s" % x).should == "x"
|
283
|
-
end
|
284
|
-
|
285
|
-
it "raises a TypeError if #to_ary does not return an Array" do
|
286
|
-
x = mock("string modulo to_ary")
|
287
|
-
x.should_receive(:to_ary).and_return("x")
|
288
|
-
|
289
|
-
-> { "%s" % x }.should raise_error(TypeError)
|
290
|
-
end
|
291
|
-
|
292
|
-
it "tries to convert the argument to Array by calling #to_ary" do
|
293
|
-
obj = mock('[1,2]')
|
294
|
-
def obj.to_ary() [1, 2] end
|
295
|
-
def obj.to_s() "obj" end
|
296
|
-
("%s %s" % obj).should == "1 2"
|
297
|
-
("%s" % obj).should == "1"
|
298
|
-
end
|
299
|
-
|
300
|
-
it "doesn't return subclass instances when called on a subclass" do
|
301
|
-
universal = mock('0')
|
302
|
-
def universal.to_int() 0 end
|
303
|
-
def universal.to_str() "0" end
|
304
|
-
def universal.to_f() 0.0 end
|
305
|
-
|
306
|
-
[
|
307
|
-
"", "foo",
|
308
|
-
"%b", "%B", "%c", "%d", "%e", "%E",
|
309
|
-
"%f", "%g", "%G", "%i", "%o", "%p",
|
310
|
-
"%s", "%u", "%x", "%X"
|
311
|
-
].each do |format|
|
312
|
-
(StringSpecs::MyString.new(format) % universal).should be_an_instance_of(String)
|
313
|
-
end
|
314
|
-
end
|
315
|
-
|
316
|
-
ruby_version_is ''...'2.7' do
|
317
|
-
it "always taints the result when the format string is tainted" do
|
318
|
-
universal = mock('0')
|
319
|
-
def universal.to_int() 0 end
|
320
|
-
def universal.to_str() "0" end
|
321
|
-
def universal.to_f() 0.0 end
|
322
|
-
|
323
|
-
[
|
324
|
-
"", "foo",
|
325
|
-
"%b", "%B", "%c", "%d", "%e", "%E",
|
326
|
-
"%f", "%g", "%G", "%i", "%o", "%p",
|
327
|
-
"%s", "%u", "%x", "%X"
|
328
|
-
].each do |format|
|
329
|
-
subcls_format = StringSpecs::MyString.new(format)
|
330
|
-
subcls_format.taint
|
331
|
-
format.taint
|
332
|
-
|
333
|
-
(format % universal).tainted?.should == true
|
334
|
-
(subcls_format % universal).tainted?.should == true
|
335
|
-
end
|
336
|
-
end
|
337
|
-
end
|
338
|
-
|
339
|
-
it "supports binary formats using %b for positive numbers" do
|
340
|
-
("%b" % 10).should == "1010"
|
341
|
-
("% b" % 10).should == " 1010"
|
342
|
-
("%1$b" % [10, 20]).should == "1010"
|
343
|
-
("%#b" % 10).should == "0b1010"
|
344
|
-
("%+b" % 10).should == "+1010"
|
345
|
-
("%-9b" % 10).should == "1010 "
|
346
|
-
("%05b" % 10).should == "01010"
|
347
|
-
("%*b" % [10, 6]).should == " 110"
|
348
|
-
("%*b" % [-10, 6]).should == "110 "
|
349
|
-
("%.4b" % 2).should == "0010"
|
350
|
-
("%.32b" % 2147483648).should == "10000000000000000000000000000000"
|
351
|
-
end
|
352
|
-
|
353
|
-
it "supports binary formats using %b for negative numbers" do
|
354
|
-
("%b" % -5).should == "..1011"
|
355
|
-
("%0b" % -5).should == "..1011"
|
356
|
-
("%.1b" % -5).should == "..1011"
|
357
|
-
("%.7b" % -5).should == "..11011"
|
358
|
-
("%.10b" % -5).should == "..11111011"
|
359
|
-
("% b" % -5).should == "-101"
|
360
|
-
("%+b" % -5).should == "-101"
|
361
|
-
not_supported_on :opal do
|
362
|
-
("%b" % -(2 ** 64 + 5)).should ==
|
363
|
-
"..101111111111111111111111111111111111111111111111111111111111111011"
|
364
|
-
end
|
365
|
-
end
|
366
|
-
|
367
|
-
it "supports binary formats using %B with same behaviour as %b except for using 0B instead of 0b for #" do
|
368
|
-
("%B" % 10).should == ("%b" % 10)
|
369
|
-
("% B" % 10).should == ("% b" % 10)
|
370
|
-
("%1$B" % [10, 20]).should == ("%1$b" % [10, 20])
|
371
|
-
("%+B" % 10).should == ("%+b" % 10)
|
372
|
-
("%-9B" % 10).should == ("%-9b" % 10)
|
373
|
-
("%05B" % 10).should == ("%05b" % 10)
|
374
|
-
("%*B" % [10, 6]).should == ("%*b" % [10, 6])
|
375
|
-
("%*B" % [-10, 6]).should == ("%*b" % [-10, 6])
|
376
|
-
|
377
|
-
("%B" % -5).should == ("%b" % -5)
|
378
|
-
("%0B" % -5).should == ("%0b" % -5)
|
379
|
-
("%.1B" % -5).should == ("%.1b" % -5)
|
380
|
-
("%.7B" % -5).should == ("%.7b" % -5)
|
381
|
-
("%.10B" % -5).should == ("%.10b" % -5)
|
382
|
-
("% B" % -5).should == ("% b" % -5)
|
383
|
-
("%+B" % -5).should == ("%+b" % -5)
|
384
|
-
not_supported_on :opal do
|
385
|
-
("%B" % -(2 ** 64 + 5)).should == ("%b" % -(2 ** 64 + 5))
|
386
|
-
end
|
387
|
-
|
388
|
-
("%#B" % 10).should == "0B1010"
|
389
|
-
end
|
390
|
-
|
391
|
-
it "supports character formats using %c" do
|
392
|
-
("%c" % 10).should == "\n"
|
393
|
-
("%2$c" % [10, 11, 14]).should == "\v"
|
394
|
-
("%-4c" % 10).should == "\n "
|
395
|
-
("%*c" % [10, 3]).should == " \003"
|
396
|
-
("%c" % 42).should == "*"
|
397
|
-
|
398
|
-
-> { "%c" % Object }.should raise_error(TypeError)
|
399
|
-
end
|
400
|
-
|
401
|
-
it "supports single character strings as argument for %c" do
|
402
|
-
("%c" % 'A').should == "A"
|
403
|
-
end
|
404
|
-
|
405
|
-
it "raises an exception for multiple character strings as argument for %c" do
|
406
|
-
-> { "%c" % 'AA' }.should raise_error(ArgumentError)
|
407
|
-
end
|
408
|
-
|
409
|
-
it "calls to_str on argument for %c formats" do
|
410
|
-
obj = mock('A')
|
411
|
-
obj.should_receive(:to_str).and_return('A')
|
412
|
-
|
413
|
-
("%c" % obj).should == "A"
|
414
|
-
end
|
415
|
-
|
416
|
-
it "calls #to_ary on argument for %c formats" do
|
417
|
-
obj = mock('65')
|
418
|
-
obj.should_receive(:to_ary).and_return([65])
|
419
|
-
("%c" % obj).should == ("%c" % [65])
|
420
|
-
end
|
421
|
-
|
422
|
-
it "calls #to_int on argument for %c formats, if the argument does not respond to #to_ary" do
|
423
|
-
obj = mock('65')
|
424
|
-
obj.should_receive(:to_int).and_return(65)
|
425
|
-
|
426
|
-
("%c" % obj).should == ("%c" % 65)
|
427
|
-
end
|
428
|
-
|
429
|
-
%w(d i).each do |f|
|
430
|
-
format = "%" + f
|
431
|
-
|
432
|
-
it "supports integer formats using #{format}" do
|
433
|
-
("%#{f}" % 10).should == "10"
|
434
|
-
("% #{f}" % 10).should == " 10"
|
435
|
-
("%1$#{f}" % [10, 20]).should == "10"
|
436
|
-
("%+#{f}" % 10).should == "+10"
|
437
|
-
("%-7#{f}" % 10).should == "10 "
|
438
|
-
("%04#{f}" % 10).should == "0010"
|
439
|
-
("%*#{f}" % [10, 4]).should == " 4"
|
440
|
-
("%6.4#{f}" % 123).should == " 0123"
|
441
|
-
end
|
442
|
-
|
443
|
-
it "supports negative integers using #{format}" do
|
444
|
-
("%#{f}" % -5).should == "-5"
|
445
|
-
("%3#{f}" % -5).should == " -5"
|
446
|
-
("%03#{f}" % -5).should == "-05"
|
447
|
-
("%+03#{f}" % -5).should == "-05"
|
448
|
-
("%+.2#{f}" % -5).should == "-05"
|
449
|
-
("%-3#{f}" % -5).should == "-5 "
|
450
|
-
("%6.4#{f}" % -123).should == " -0123"
|
451
|
-
end
|
452
|
-
|
453
|
-
it "supports negative integers using #{format}, giving priority to `-`" do
|
454
|
-
("%-03#{f}" % -5).should == "-5 "
|
455
|
-
("%+-03#{f}" % -5).should == "-5 "
|
456
|
-
end
|
457
|
-
end
|
458
|
-
|
459
|
-
it "supports float formats using %e" do
|
460
|
-
("%e" % 10).should == "1.000000e+01"
|
461
|
-
("% e" % 10).should == " 1.000000e+01"
|
462
|
-
("%1$e" % 10).should == "1.000000e+01"
|
463
|
-
("%#e" % 10).should == "1.000000e+01"
|
464
|
-
("%+e" % 10).should == "+1.000000e+01"
|
465
|
-
("%-7e" % 10).should == "1.000000e+01"
|
466
|
-
("%05e" % 10).should == "1.000000e+01"
|
467
|
-
("%*e" % [10, 9]).should == "9.000000e+00"
|
468
|
-
end
|
469
|
-
|
470
|
-
it "supports float formats using %e, but Inf, -Inf, and NaN are not floats" do
|
471
|
-
("%e" % 1e1020).should == "Inf"
|
472
|
-
("%e" % -1e1020).should == "-Inf"
|
473
|
-
("%e" % -Float::NAN).should == "NaN"
|
474
|
-
("%e" % Float::NAN).should == "NaN"
|
475
|
-
end
|
476
|
-
|
477
|
-
it "supports float formats using %E, but Inf, -Inf, and NaN are not floats" do
|
478
|
-
("%E" % 1e1020).should == "Inf"
|
479
|
-
("%E" % -1e1020).should == "-Inf"
|
480
|
-
("%-10E" % 1e1020).should == "Inf "
|
481
|
-
("%10E" % 1e1020).should == " Inf"
|
482
|
-
("%+E" % 1e1020).should == "+Inf"
|
483
|
-
("% E" % 1e1020).should == " Inf"
|
484
|
-
("%E" % Float::NAN).should == "NaN"
|
485
|
-
("%E" % -Float::NAN).should == "NaN"
|
486
|
-
end
|
487
|
-
|
488
|
-
it "supports float formats using %E" do
|
489
|
-
("%E" % 10).should == "1.000000E+01"
|
490
|
-
("% E" % 10).should == " 1.000000E+01"
|
491
|
-
("%1$E" % 10).should == "1.000000E+01"
|
492
|
-
("%#E" % 10).should == "1.000000E+01"
|
493
|
-
("%+E" % 10).should == "+1.000000E+01"
|
494
|
-
("%-7E" % 10).should == "1.000000E+01"
|
495
|
-
("%05E" % 10).should == "1.000000E+01"
|
496
|
-
("%*E" % [10, 9]).should == "9.000000E+00"
|
497
|
-
end
|
498
|
-
|
499
|
-
it "pads with spaces for %E with Inf, -Inf, and NaN" do
|
500
|
-
("%010E" % -1e1020).should == " -Inf"
|
501
|
-
("%010E" % 1e1020).should == " Inf"
|
502
|
-
("%010E" % Float::NAN).should == " NaN"
|
503
|
-
end
|
504
|
-
|
505
|
-
it "supports float formats using %f" do
|
506
|
-
("%f" % 10).should == "10.000000"
|
507
|
-
("% f" % 10).should == " 10.000000"
|
508
|
-
("%1$f" % 10).should == "10.000000"
|
509
|
-
("%#f" % 10).should == "10.000000"
|
510
|
-
("%#0.3f" % 10).should == "10.000"
|
511
|
-
("%+f" % 10).should == "+10.000000"
|
512
|
-
("%-7f" % 10).should == "10.000000"
|
513
|
-
("%05f" % 10).should == "10.000000"
|
514
|
-
("%0.5f" % 10).should == "10.00000"
|
515
|
-
("%*f" % [10, 9]).should == " 9.000000"
|
516
|
-
end
|
517
|
-
|
518
|
-
it "supports float formats using %g" do
|
519
|
-
("%g" % 10).should == "10"
|
520
|
-
("% g" % 10).should == " 10"
|
521
|
-
("%1$g" % 10).should == "10"
|
522
|
-
("%#g" % 10).should == "10.0000"
|
523
|
-
("%#.3g" % 10).should == "10.0"
|
524
|
-
("%+g" % 10).should == "+10"
|
525
|
-
("%-7g" % 10).should == "10 "
|
526
|
-
("%05g" % 10).should == "00010"
|
527
|
-
("%g" % 10**10).should == "1e+10"
|
528
|
-
("%*g" % [10, 9]).should == " 9"
|
529
|
-
end
|
530
|
-
|
531
|
-
it "supports float formats using %G" do
|
532
|
-
("%G" % 10).should == "10"
|
533
|
-
("% G" % 10).should == " 10"
|
534
|
-
("%1$G" % 10).should == "10"
|
535
|
-
("%#G" % 10).should == "10.0000"
|
536
|
-
("%#.3G" % 10).should == "10.0"
|
537
|
-
("%+G" % 10).should == "+10"
|
538
|
-
("%-7G" % 10).should == "10 "
|
539
|
-
("%05G" % 10).should == "00010"
|
540
|
-
("%G" % 10**10).should == "1E+10"
|
541
|
-
("%*G" % [10, 9]).should == " 9"
|
542
|
-
end
|
543
|
-
|
544
|
-
it "supports octal formats using %o for positive numbers" do
|
545
|
-
("%o" % 10).should == "12"
|
546
|
-
("% o" % 10).should == " 12"
|
547
|
-
("%1$o" % [10, 20]).should == "12"
|
548
|
-
("%#o" % 10).should == "012"
|
549
|
-
("%+o" % 10).should == "+12"
|
550
|
-
("%-9o" % 10).should == "12 "
|
551
|
-
("%05o" % 10).should == "00012"
|
552
|
-
("%*o" % [10, 6]).should == " 6"
|
553
|
-
end
|
554
|
-
|
555
|
-
it "supports octal formats using %o for negative numbers" do
|
556
|
-
# These are incredibly wrong. -05 == -5, not 7177777...whatever
|
557
|
-
("%o" % -5).should == "..73"
|
558
|
-
("%0o" % -5).should == "..73"
|
559
|
-
("%.4o" % 20).should == "0024"
|
560
|
-
("%.1o" % -5).should == "..73"
|
561
|
-
("%.7o" % -5).should == "..77773"
|
562
|
-
("%.10o" % -5).should == "..77777773"
|
563
|
-
|
564
|
-
("% o" % -26).should == "-32"
|
565
|
-
("%+o" % -26).should == "-32"
|
566
|
-
not_supported_on :opal do
|
567
|
-
("%o" % -(2 ** 64 + 5)).should == "..75777777777777777777773"
|
568
|
-
end
|
569
|
-
end
|
570
|
-
|
571
|
-
it "supports inspect formats using %p" do
|
572
|
-
("%p" % 10).should == "10"
|
573
|
-
("%1$p" % [10, 5]).should == "10"
|
574
|
-
("%-22p" % 10).should == "10 "
|
575
|
-
("%*p" % [10, 10]).should == " 10"
|
576
|
-
("%p" % {capture: 1}).should == "{:capture=>1}"
|
577
|
-
("%p" % "str").should == "\"str\""
|
578
|
-
end
|
579
|
-
|
580
|
-
it "calls inspect on arguments for %p format" do
|
581
|
-
obj = mock('obj')
|
582
|
-
def obj.inspect() "obj" end
|
583
|
-
("%p" % obj).should == "obj"
|
584
|
-
|
585
|
-
# undef is not working
|
586
|
-
# obj = mock('obj')
|
587
|
-
# class << obj; undef :inspect; end
|
588
|
-
# def obj.method_missing(*args) "obj" end
|
589
|
-
# ("%p" % obj).should == "obj"
|
590
|
-
end
|
591
|
-
|
592
|
-
ruby_version_is ''...'2.7' do
|
593
|
-
it "taints result for %p when argument.inspect is tainted" do
|
594
|
-
obj = mock('x')
|
595
|
-
def obj.inspect() "x".taint end
|
596
|
-
|
597
|
-
("%p" % obj).tainted?.should == true
|
598
|
-
|
599
|
-
obj = mock('x'); obj.taint
|
600
|
-
def obj.inspect() "x" end
|
601
|
-
|
602
|
-
("%p" % obj).tainted?.should == false
|
603
|
-
end
|
604
|
-
end
|
605
|
-
|
606
|
-
it "supports string formats using %s" do
|
607
|
-
("%s" % "hello").should == "hello"
|
608
|
-
("%s" % "").should == ""
|
609
|
-
("%s" % 10).should == "10"
|
610
|
-
("%1$s" % [10, 8]).should == "10"
|
611
|
-
("%-5s" % 10).should == "10 "
|
612
|
-
("%*s" % [10, 9]).should == " 9"
|
613
|
-
end
|
614
|
-
|
615
|
-
it "respects a space padding request not as part of the width" do
|
616
|
-
x = "% -5s" % ["foo"]
|
617
|
-
x.should == "foo "
|
618
|
-
end
|
619
|
-
|
620
|
-
it "calls to_s on non-String arguments for %s format" do
|
621
|
-
obj = mock('obj')
|
622
|
-
def obj.to_s() "obj" end
|
623
|
-
|
624
|
-
("%s" % obj).should == "obj"
|
625
|
-
|
626
|
-
# undef doesn't work
|
627
|
-
# obj = mock('obj')
|
628
|
-
# class << obj; undef :to_s; end
|
629
|
-
# def obj.method_missing(*args) "obj" end
|
630
|
-
#
|
631
|
-
# ("%s" % obj).should == "obj"
|
632
|
-
end
|
633
|
-
|
634
|
-
ruby_version_is ''...'2.7' do
|
635
|
-
it "taints result for %s when argument is tainted" do
|
636
|
-
("%s" % "x".taint).tainted?.should == true
|
637
|
-
("%s" % mock('x').taint).tainted?.should == true
|
638
|
-
end
|
639
|
-
end
|
640
|
-
|
641
|
-
# MRI crashes on this one.
|
642
|
-
# See http://groups.google.com/group/ruby-core-google/t/c285c18cd94c216d
|
643
|
-
it "raises an ArgumentError for huge precisions for %s" do
|
644
|
-
block = -> { "%.25555555555555555555555555555555555555s" % "hello world" }
|
645
|
-
block.should raise_error(ArgumentError)
|
646
|
-
end
|
647
|
-
|
648
|
-
# Note: %u has been changed to an alias for %d in 1.9.
|
649
|
-
it "supports unsigned formats using %u" do
|
650
|
-
("%u" % 10).should == "10"
|
651
|
-
("% u" % 10).should == " 10"
|
652
|
-
("%1$u" % [10, 20]).should == "10"
|
653
|
-
("%+u" % 10).should == "+10"
|
654
|
-
("%-7u" % 10).should == "10 "
|
655
|
-
("%04u" % 10).should == "0010"
|
656
|
-
("%*u" % [10, 4]).should == " 4"
|
657
|
-
end
|
658
|
-
|
659
|
-
it "formats negative values with a leading sign using %u" do
|
660
|
-
("% u" % -26).should == "-26"
|
661
|
-
("%+u" % -26).should == "-26"
|
662
|
-
end
|
663
|
-
|
664
|
-
it "supports negative bignums with %u or %d" do
|
665
|
-
("%u" % -(2 ** 64 + 5)).should == "-18446744073709551621"
|
666
|
-
("%d" % -(2 ** 64 + 5)).should == "-18446744073709551621"
|
667
|
-
end
|
668
|
-
|
669
|
-
it "supports hex formats using %x for positive numbers" do
|
670
|
-
("%x" % 10).should == "a"
|
671
|
-
("% x" % 10).should == " a"
|
672
|
-
("%1$x" % [10, 20]).should == "a"
|
673
|
-
("%#x" % 10).should == "0xa"
|
674
|
-
("%+x" % 10).should == "+a"
|
675
|
-
("%-9x" % 10).should == "a "
|
676
|
-
("%05x" % 10).should == "0000a"
|
677
|
-
("%*x" % [10, 6]).should == " 6"
|
678
|
-
("%.4x" % 20).should == "0014"
|
679
|
-
("%x" % 0xFFFFFFFF).should == "ffffffff"
|
680
|
-
end
|
681
|
-
|
682
|
-
it "supports hex formats using %x for negative numbers" do
|
683
|
-
("%x" % -5).should == "..fb"
|
684
|
-
("%0x" % -5).should == "..fb"
|
685
|
-
("%.1x" % -5).should == "..fb"
|
686
|
-
("%.7x" % -5).should == "..ffffb"
|
687
|
-
("%.10x" % -5).should == "..fffffffb"
|
688
|
-
("% x" % -26).should == "-1a"
|
689
|
-
("%+x" % -26).should == "-1a"
|
690
|
-
not_supported_on :opal do
|
691
|
-
("%x" % -(2 ** 64 + 5)).should == "..fefffffffffffffffb"
|
692
|
-
end
|
693
|
-
end
|
694
|
-
|
695
|
-
it "supports hex formats using %X for positive numbers" do
|
696
|
-
("%X" % 10).should == "A"
|
697
|
-
("% X" % 10).should == " A"
|
698
|
-
("%1$X" % [10, 20]).should == "A"
|
699
|
-
("%#X" % 10).should == "0XA"
|
700
|
-
("%+X" % 10).should == "+A"
|
701
|
-
("%-9X" % 10).should == "A "
|
702
|
-
("%05X" % 10).should == "0000A"
|
703
|
-
("%*X" % [10, 6]).should == " 6"
|
704
|
-
("%X" % 0xFFFFFFFF).should == "FFFFFFFF"
|
705
|
-
end
|
706
|
-
|
707
|
-
it "supports hex formats using %X for negative numbers" do
|
708
|
-
("%X" % -5).should == "..FB"
|
709
|
-
("%0X" % -5).should == "..FB"
|
710
|
-
("%.1X" % -5).should == "..FB"
|
711
|
-
("%.7X" % -5).should == "..FFFFB"
|
712
|
-
("%.10X" % -5).should == "..FFFFFFFB"
|
713
|
-
("% X" % -26).should == "-1A"
|
714
|
-
("%+X" % -26).should == "-1A"
|
715
|
-
not_supported_on :opal do
|
716
|
-
("%X" % -(2 ** 64 + 5)).should == "..FEFFFFFFFFFFFFFFFB"
|
717
|
-
end
|
718
|
-
end
|
719
|
-
|
720
|
-
it "formats zero without prefix using %#x" do
|
721
|
-
("%#x" % 0).should == "0"
|
722
|
-
end
|
723
|
-
|
724
|
-
it "formats zero without prefix using %#X" do
|
725
|
-
("%#X" % 0).should == "0"
|
726
|
-
end
|
727
|
-
|
728
|
-
%w(b d i o u x X).each do |f|
|
729
|
-
format = "%" + f
|
730
|
-
|
731
|
-
it "behaves as if calling Kernel#Integer for #{format} argument, if it does not respond to #to_ary" do
|
732
|
-
(format % "10").should == (format % Kernel.Integer("10"))
|
733
|
-
(format % "0x42").should == (format % Kernel.Integer("0x42"))
|
734
|
-
(format % "0b1101").should == (format % Kernel.Integer("0b1101"))
|
735
|
-
(format % "0b1101_0000").should == (format % Kernel.Integer("0b1101_0000"))
|
736
|
-
(format % "0777").should == (format % Kernel.Integer("0777"))
|
737
|
-
-> {
|
738
|
-
# see [ruby-core:14139] for more details
|
739
|
-
(format % "0777").should == (format % Kernel.Integer("0777"))
|
740
|
-
}.should_not raise_error(ArgumentError)
|
741
|
-
|
742
|
-
-> { format % "0__7_7_7" }.should raise_error(ArgumentError)
|
743
|
-
|
744
|
-
-> { format % "" }.should raise_error(ArgumentError)
|
745
|
-
-> { format % "x" }.should raise_error(ArgumentError)
|
746
|
-
-> { format % "5x" }.should raise_error(ArgumentError)
|
747
|
-
-> { format % "08" }.should raise_error(ArgumentError)
|
748
|
-
-> { format % "0b2" }.should raise_error(ArgumentError)
|
749
|
-
-> { format % "123__456" }.should raise_error(ArgumentError)
|
750
|
-
|
751
|
-
obj = mock('5')
|
752
|
-
obj.should_receive(:to_i).and_return(5)
|
753
|
-
(format % obj).should == (format % 5)
|
754
|
-
|
755
|
-
obj = mock('6')
|
756
|
-
obj.stub!(:to_i).and_return(5)
|
757
|
-
obj.should_receive(:to_int).and_return(6)
|
758
|
-
(format % obj).should == (format % 6)
|
759
|
-
end
|
760
|
-
end
|
761
|
-
|
762
|
-
%w(e E f g G).each do |f|
|
763
|
-
format = "%" + f
|
764
|
-
|
765
|
-
it "tries to convert the passed argument to an Array using #to_ary" do
|
766
|
-
obj = mock('3.14')
|
767
|
-
obj.should_receive(:to_ary).and_return([3.14])
|
768
|
-
(format % obj).should == (format % [3.14])
|
769
|
-
end
|
770
|
-
|
771
|
-
it "behaves as if calling Kernel#Float for #{format} arguments, when the passed argument does not respond to #to_ary" do
|
772
|
-
(format % 10).should == (format % 10.0)
|
773
|
-
(format % "-10.4e-20").should == (format % -10.4e-20)
|
774
|
-
(format % ".5").should == (format % 0.5)
|
775
|
-
(format % "-.5").should == (format % -0.5)
|
776
|
-
# Something's strange with this spec:
|
777
|
-
# it works just fine in individual mode, but not when run as part of a group
|
778
|
-
(format % "10_1_0.5_5_5").should == (format % 1010.555)
|
779
|
-
|
780
|
-
(format % "0777").should == (format % 777)
|
781
|
-
|
782
|
-
-> { format % "" }.should raise_error(ArgumentError)
|
783
|
-
-> { format % "x" }.should raise_error(ArgumentError)
|
784
|
-
-> { format % "." }.should raise_error(ArgumentError)
|
785
|
-
-> { format % "10." }.should raise_error(ArgumentError)
|
786
|
-
-> { format % "5x" }.should raise_error(ArgumentError)
|
787
|
-
-> { format % "0b1" }.should raise_error(ArgumentError)
|
788
|
-
-> { format % "10e10.5" }.should raise_error(ArgumentError)
|
789
|
-
-> { format % "10__10" }.should raise_error(ArgumentError)
|
790
|
-
-> { format % "10.10__10" }.should raise_error(ArgumentError)
|
791
|
-
|
792
|
-
obj = mock('5.0')
|
793
|
-
obj.should_receive(:to_f).and_return(5.0)
|
794
|
-
(format % obj).should == (format % 5.0)
|
795
|
-
end
|
796
|
-
|
797
|
-
it "behaves as if calling Kernel#Float for #{format} arguments, when the passed argument is hexadecimal string" do
|
798
|
-
(format % "0xA").should == (format % 0xA)
|
799
|
-
end
|
800
|
-
|
801
|
-
ruby_version_is ''...'2.7' do
|
802
|
-
it "doesn't taint the result for #{format} when argument is tainted" do
|
803
|
-
(format % "5".taint).tainted?.should == false
|
804
|
-
end
|
805
|
-
end
|
806
|
-
end
|
807
|
-
|
808
|
-
describe "when format string contains %{} sections" do
|
809
|
-
it "replaces %{} sections with values from passed-in hash" do
|
810
|
-
("%{foo}bar" % {foo: 'oof'}).should == "oofbar"
|
811
|
-
end
|
812
|
-
|
813
|
-
it "should raise ArgumentError if no hash given" do
|
814
|
-
-> {"%{foo}" % []}.should raise_error(ArgumentError)
|
815
|
-
end
|
816
|
-
end
|
817
|
-
|
818
|
-
describe "when format string contains %<> formats" do
|
819
|
-
it "uses the named argument for the format's value" do
|
820
|
-
("%<foo>d" % {foo: 1}).should == "1"
|
821
|
-
end
|
822
|
-
|
823
|
-
it "raises KeyError if key is missing from passed-in hash" do
|
824
|
-
-> {"%<foo>d" % {}}.should raise_error(KeyError)
|
825
|
-
end
|
826
|
-
|
827
|
-
it "should raise ArgumentError if no hash given" do
|
828
|
-
-> {"%<foo>" % []}.should raise_error(ArgumentError)
|
829
|
-
end
|
830
|
-
end
|
831
|
-
end
|