contrast-agent 4.4.1 → 4.5.0

data/ruby-agent.gemspec

@@ -1,4 +1,4 @@
-# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require_relative './lib/contrast/agent/version'
@@ -41,7 +41,7 @@ end
 
 # Dependencies used for framework testing.
 def self.add_frameworks spec
-  spec.add_development_dependency 'rails', '>= 3'
+  spec.add_development_dependency 'rails', '6.0.3.5'
   spec.add_development_dependency 'sinatra', '>= 2'
 end
 
@@ -85,9 +85,8 @@ end
 
 # Dependencies not mocked out during RSpec that we test real code of, beyond just frameworks.
 def self.add_tested_gems spec
-  spec.add_development_dependency 'debase'
   spec.add_development_dependency 'execjs'
-  spec.add_development_dependency 'sqlite3', '1.3.9'
+  spec.add_development_dependency 'sqlite3'
   spec.add_development_dependency 'therubyracer'
   spec.add_development_dependency 'tilt'
   spec.add_development_dependency 'xpath'
@@ -162,7 +161,7 @@ Gem::Specification.new do |spec|
     'Testing and Protection.'
   spec.homepage     = 'https://www.contrastsecurity.com'
   spec.license      = 'CONTRAST SECURITY (see license file)'
-  spec.required_ruby_version = ['>= 2.5.0', '< 2.8.0']
+  spec.required_ruby_version = ['>= 2.5.0', '< 3.1.0']
 
   spec.bindir        = 'exe'
   spec.executables   = ['contrast_service']

data/service_executables/VERSION

@@ -1 +1 @@
-2.17.4
+2.18.0

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: contrast-agent
 version: !ruby/object:Gem::Version
-  version: 4.4.1
+  version: 4.5.0
 platform: ruby
 authors:
 - galen.palmer@contrastsecurity.com
@@ -13,7 +13,7 @@ authors:
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2021-03-10 00:00:00.000000000 Z
+date: 2021-03-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -229,16 +229,16 @@ dependencies:
   name: rails
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '='
       - !ruby/object:Gem::Version
-        version: '3'
+        version: 6.0.3.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '='
       - !ruby/object:Gem::Version
-        version: '3'
+        version: 6.0.3.5
 - !ruby/object:Gem::Dependency
   name: sinatra
   requirement: !ruby/object:Gem::Requirement
@@ -254,7 +254,7 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '2'
 - !ruby/object:Gem::Dependency
-  name: debase
+  name: execjs
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -268,7 +268,7 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: execjs
+  name: sqlite3
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -281,20 +281,6 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-- !ruby/object:Gem::Dependency
-  name: sqlite3
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - '='
-      - !ruby/object:Gem::Version
-        version: 1.3.9
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - '='
-      - !ruby/object:Gem::Version
-        version: 1.3.9
 - !ruby/object:Gem::Dependency
   name: therubyracer
   requirement: !ruby/object:Gem::Requirement
@@ -513,20 +499,20 @@ executables:
 - contrast_service
 extensions:
 - ext/cs__common/extconf.rb
-- ext/cs__assess_basic_object/extconf.rb
+- ext/cs__contrast_patch/extconf.rb
 - ext/cs__assess_string_interpolation26/extconf.rb
-- ext/cs__assess_array/extconf.rb
+- ext/cs__assess_hash/extconf.rb
 - ext/cs__protect_kernel/extconf.rb
+- ext/cs__assess_fiber_track/extconf.rb
+- ext/cs__assess_array/extconf.rb
+- ext/cs__assess_active_record_named/extconf.rb
+- ext/cs__assess_string/extconf.rb
 - ext/cs__assess_kernel/extconf.rb
 - ext/cs__assess_module/extconf.rb
-- ext/cs__assess_string/extconf.rb
-- ext/cs__assess_active_record_named/extconf.rb
+- ext/cs__assess_basic_object/extconf.rb
+- ext/cs__assess_marshal_module/extconf.rb
 - ext/cs__assess_yield_track/extconf.rb
-- ext/cs__contrast_patch/extconf.rb
-- ext/cs__assess_hash/extconf.rb
 - ext/cs__assess_regexp/extconf.rb
-- ext/cs__assess_marshal_module/extconf.rb
-- ext/cs__assess_fiber_track/extconf.rb
 extra_rdoc_files: []
 files:
 - ".clang-format"
@@ -788,7 +774,6 @@ files:
 - lib/contrast/agent/inventory/dependencies.rb
 - lib/contrast/agent/inventory/dependency_analysis.rb
 - lib/contrast/agent/inventory/dependency_usage_analysis.rb
-- lib/contrast/agent/inventory/gemfile_digest_cache.rb
 - lib/contrast/agent/inventory/policy/datastores.rb
 - lib/contrast/agent/inventory/policy/policy.rb
 - lib/contrast/agent/inventory/policy/trigger_node.rb
@@ -868,6 +853,7 @@ files:
 - lib/contrast/api/decorators/application_update.rb
 - lib/contrast/api/decorators/http_request.rb
 - lib/contrast/api/decorators/input_analysis.rb
+- lib/contrast/api/decorators/instrumentation_mode.rb
 - lib/contrast/api/decorators/library.rb
 - lib/contrast/api/decorators/library_usage_update.rb
 - lib/contrast/api/decorators/message.rb
@@ -916,6 +902,7 @@ files:
 - lib/contrast/config/server_configuration.rb
 - lib/contrast/config/service_configuration.rb
 - lib/contrast/configuration.rb
+- lib/contrast/delegators/input_analysis.rb
 - lib/contrast/extension/assess.rb
 - lib/contrast/extension/assess/array.rb
 - lib/contrast/extension/assess/erb.rb
@@ -1013,14 +1000,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 2.5.0
   - - "<"
     - !ruby/object:Gem::Version
-      version: 2.8.0
+      version: 3.1.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3
+rubygems_version: 3.1.4
 signing_key: 
 specification_version: 4
 summary: Contrast Security's agent for rack-based applications.

data/lib/contrast/agent/inventory/gemfile_digest_cache.rb

@@ -1,38 +0,0 @@
-# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
-# frozen_string_literal: true
-
-module Contrast
-  module Agent
-    module Inventory
-      # Keeps a map of gem digest to files for reporting file usage
-      class GemfileDigestCache
-        extend Forwardable
-        def_delegator :@gem_spec_digest_to_files,
-                      :empty?
-
-        def initialize
-          @gem_spec_digest_to_files = {}
-        end
-
-        def generate_usage_data activity
-          return unless activity
-
-          @gem_spec_digest_to_files.each_pair do |digest, files|
-            usage = Contrast::Api::Dtm::LibraryUsageUpdate.build(digest, files)
-            activity.library_usages[usage.hash_code] = usage if activity
-          end
-          @gem_spec_digest_to_files.clear
-        end
-
-        def use_cache digest
-          yield get(digest)
-        end
-
-        def get digest
-          @gem_spec_digest_to_files[digest] = Set.new unless @gem_spec_digest_to_files.key?(digest)
-          @gem_spec_digest_to_files[digest]
-        end
-      end
-    end
-  end
-end