contrast-agent 4.0.0 → 4.3.2

data/resources/protect/policy.json

@@ -379,6 +379,18 @@
           "method_visibility": "public",
           "applicator_method": "apply_rule__io",
           "properties": {}
+        },{
+          "class_name": "Nokogiri::XML::Document",
+          "method_name": "parse",
+          "instance_method": false,
+          "method_visibility": "public",
+          "properties": {}
+        }, {
+          "class_name": "Nokogiri::XML::SAX::Parser",
+          "method_name": "parse",
+          "instance_method": true,
+          "method_visibility": "public",
+          "properties": {}
         },{
           "class_name": "Nokogiri::XML::SAX::Parser",
           "method_name": "parse_memory",

data/ruby-agent.gemspec

@@ -14,12 +14,14 @@ def self.add_authors spec
     donald.propst@contrastsecurity.com
     alex.macdonald@contrastsecurity.com
     mark.petersen@contrastsecurity.com
+    joshua.reed@contrastsecurity.com
   ]
 end
 
 # Add those dependencies required to develop or test the Agent
 def self.add_dev_dependencies spec
   spec.add_development_dependency 'amazing_print'
+  spec.add_development_dependency 'benchmark-ips'
   spec.add_development_dependency 'bundler'
   spec.add_development_dependency 'climate_control' # mock ENV
   spec.add_development_dependency 'debase'
@@ -33,16 +35,18 @@ def self.add_dev_dependencies spec
   spec.add_development_dependency 'parser', '~> 2.6'
   spec.add_development_dependency 'pry'
   spec.add_development_dependency 'rails', '>= 3'
-  spec.add_development_dependency 'rake', '~> 10.0'
+  spec.add_development_dependency 'rake', '>= 12.3.3'
   spec.add_development_dependency 'rake-compiler', '~> 0'
   spec.add_development_dependency 'rspec', '~> 3.0'
   spec.add_development_dependency 'rspec-benchmark'
   spec.add_development_dependency 'rspec_junit_formatter', '0.3.0'
-  spec.add_development_dependency 'rubocop', '0.93.1'
-  spec.add_development_dependency 'rubocop-performance', '1.8.1'
-  spec.add_development_dependency 'rubocop-rspec', '1.43.2'
+  spec.add_development_dependency 'rubocop', '1.6.1'
+  spec.add_development_dependency 'rubocop-performance', '1.9.1'
+  spec.add_development_dependency 'rubocop-rails', '2.9.1'
+  spec.add_development_dependency 'rubocop-rake', '0.5.1'
+  spec.add_development_dependency 'rubocop-rspec', '2.1.0'
   spec.add_development_dependency 'ruby-debug-ide'
-  spec.add_development_dependency 'simplecov', '~> 0.18'
+  spec.add_development_dependency 'simplecov', '0.20.0'
   spec.add_development_dependency 'sinatra', '>= 2'
   spec.add_development_dependency 'sqlite3', '1.3.9'
   spec.add_development_dependency 'therubyracer'
@@ -58,7 +62,7 @@ end
 # corresponding update to the fake gem server data in TeamServer.
 def self.add_dependencies spec
   spec.add_dependency 'ougai', '~> 1.8'
-  spec.add_dependency 'parser', '~> 2.6'
+  spec.add_dependency 'parser', '~> 2.6' # TODO: RUBY-714 remove w/ EOL of 2.5
   spec.add_dependency 'protobuf', '~> 3.10'
   spec.add_dependency 'rack', '~> 2.0'
 end

data/service_executables/VERSION

@@ -1 +1 @@
-2.14.4
+2.17.4

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: contrast-agent
 version: !ruby/object:Gem::Version
-  version: 4.0.0
+  version: 4.3.2
 platform: ruby
 authors:
 - galen.palmer@contrastsecurity.com
@@ -9,10 +9,11 @@ authors:
 - donald.propst@contrastsecurity.com
 - alex.macdonald@contrastsecurity.com
 - mark.petersen@contrastsecurity.com
+- joshua.reed@contrastsecurity.com
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-11-05 00:00:00.000000000 Z
+date: 2021-02-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: amazing_print
@@ -28,6 +29,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: benchmark-ips
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -214,16 +229,16 @@ dependencies:
   name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: 12.3.3
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: 12.3.3
 - !ruby/object:Gem::Dependency
   name: rake-compiler
   requirement: !ruby/object:Gem::Requirement
@@ -286,42 +301,70 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.93.1
+        version: 1.6.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.93.1
+        version: 1.6.1
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.8.1
+        version: 1.9.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.8.1
+        version: 1.9.1
+- !ruby/object:Gem::Dependency
+  name: rubocop-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.9.1
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.9.1
+- !ruby/object:Gem::Dependency
+  name: rubocop-rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.5.1
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.5.1
 - !ruby/object:Gem::Dependency
   name: rubocop-rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.43.2
+        version: 2.1.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.43.2
+        version: 2.1.0
 - !ruby/object:Gem::Dependency
   name: ruby-debug-ide
   requirement: !ruby/object:Gem::Requirement
@@ -340,16 +383,16 @@ dependencies:
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - '='
       - !ruby/object:Gem::Version
-        version: '0.18'
+        version: 0.20.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - '='
       - !ruby/object:Gem::Version
-        version: '0.18'
+        version: 0.20.0
 - !ruby/object:Gem::Dependency
   name: sinatra
   requirement: !ruby/object:Gem::Requirement
@@ -498,20 +541,20 @@ executables:
 - contrast_service
 extensions:
 - ext/cs__common/extconf.rb
-- ext/cs__assess_module/extconf.rb
-- ext/cs__protect_kernel/extconf.rb
-- ext/cs__assess_array/extconf.rb
-- ext/cs__assess_hash/extconf.rb
-- ext/cs__assess_marshal_module/extconf.rb
+- ext/cs__assess_active_record_named/extconf.rb
+- ext/cs__assess_string/extconf.rb
 - ext/cs__assess_kernel/extconf.rb
+- ext/cs__assess_basic_object/extconf.rb
 - ext/cs__assess_regexp/extconf.rb
 - ext/cs__assess_yield_track/extconf.rb
-- ext/cs__assess_string/extconf.rb
-- ext/cs__contrast_patch/extconf.rb
-- ext/cs__assess_active_record_named/extconf.rb
 - ext/cs__assess_fiber_track/extconf.rb
-- ext/cs__assess_basic_object/extconf.rb
+- ext/cs__assess_hash/extconf.rb
+- ext/cs__assess_array/extconf.rb
 - ext/cs__assess_string_interpolation26/extconf.rb
+- ext/cs__assess_module/extconf.rb
+- ext/cs__assess_marshal_module/extconf.rb
+- ext/cs__contrast_patch/extconf.rb
+- ext/cs__protect_kernel/extconf.rb
 extra_rdoc_files: []
 files:
 - ".clang-format"
@@ -708,6 +751,7 @@ files:
 - lib/contrast/agent.rb
 - lib/contrast/agent/assess.rb
 - lib/contrast/agent/assess/contrast_event.rb
+- lib/contrast/agent/assess/contrast_object.rb
 - lib/contrast/agent/assess/events/event_factory.rb
 - lib/contrast/agent/assess/events/source_event.rb
 - lib/contrast/agent/assess/finalizers/freeze.rb