cronwatch 0.5.0 → 0.5.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 17442875e05c9f99c45cbba2f547fcd0e3233c30962b2825c03f5b0470c18aae
-  data.tar.gz: '065965f32d1b1a2ada5c9344928de83683d98a5b178d174cc44f795d80eb9efa'
+  metadata.gz: ce9304826bfc7f8e79615453ee7b5c25503d3dbd7d8b803c229152b3e3c93844
+  data.tar.gz: ef0e084ae833b0e57f2dd997fa500ca43c6dfcddd65730265e166d7c227f00d5
 SHA512:
-  metadata.gz: 54d7a578558f41e1efebd3dec812f997a5e052ae96ecf479b45a45e51b95316c71c892aacc7349d44931b0318135c2955a28f54f74b0c6d6ce7d26de7499b346
-  data.tar.gz: 8477df64cd3c969adf84ebf657c5f3d605616be348dc207926f59923ae2d14edfc727bd90d3a2388e1c6a89818160070cf71b1891af290cc1264b785a91808a0
+  metadata.gz: 23c832ba7e7ff1e34ca6930f3b9eb7785f6175db5bfec6ef731495f695a16454ea63e0fb474dd305771f33eed145d3ab41fa762ea40baafb8187254c8b1099d5
+  data.tar.gz: bdaac367aac5c069fd6c3c3c38117e40c1afa7f073d5cb95c2c56c0a97efa58a0fabe86b1640905d2d01ec44cef44ae78aaff45d03cc4fe9dd9e381295e44d57

data/lib/cronwatch/alerts/webhook.rb

@@ -38,7 +38,7 @@ module Cronwatch
       end
 
       def self.origin(url)
-        uri = URI(url)
+        uri = URI(HTTP.clean_url(url))
         raise URI::InvalidURIError unless uri.scheme && uri.host
 
         port = uri.port && uri.port != uri.default_port ? ":#{uri.port}" : ""

data/lib/cronwatch/http.rb

@@ -34,7 +34,7 @@ module Cronwatch
       # past it while the body is still arriving, returns the answer with an
       # empty body, as the SDK's channels treat a body they could not read.
       def post(url, body, headers)
-        uri = URI(url)
+        uri = HTTP.postable(url)
         deadline = HTTP.monotonic + @timeout
         request = Net::HTTP::Post.new(uri.request_uri)
         headers.each { |k, v| request[k] = HTTP.trim_header(v) }
@@ -96,6 +96,30 @@ module Cronwatch
       [deadline - monotonic, 0.001].max
     end
 
+    # A URL as fetch reads it: the spaces and control characters around it,
+    # and any tab or line break inside it, dropped (a pasted webhook URL often
+    # ends in a newline).
+    def clean_url(url)
+      url.to_s.gsub(/\A[\u0000-\u0020]+|[\u0000-\u0020]+\z/, "").delete("\t\n\r")
+    end
+
+    # The URL parsed, once it is one a channel can post to. Refused without
+    # quoting it: URI's own errors quote the whole URL, and a webhook URL's
+    # path is its credential.
+    def postable(url)
+      uri = begin
+        URI(clean_url(url))
+      rescue URI::Error, ArgumentError
+        nil
+      end
+      scheme = uri&.scheme&.downcase
+      unless %w[http https].include?(scheme) && uri.host && !uri.host.empty?
+        shown = uri&.scheme && uri.host ? "#{scheme}:" : "this URL"
+        raise ArgumentError, "only http and https URLs can be posted to, not #{shown}"
+      end
+      uri
+    end
+
     # A header value without the spaces, tabs and line breaks around it, as fetch sends it.
     def trim_header(value)
       value.to_s.gsub(/\A[ \t\r\n]+|[ \t\r\n]+\z/, "")

data/lib/cronwatch/version.rb

@@ -2,5 +2,5 @@
 
 module Cronwatch
   # Kept in step with @cronwatch/sdk.
-  VERSION = "0.5.0"
+  VERSION = "0.5.1"
 end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: cronwatch
 version: !ruby/object:Gem::Version
-  version: 0.5.0
+  version: 0.5.1
 platform: ruby
 authors:
 - Jon C. Phillips
-autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-09-28 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: fugit
@@ -27,7 +26,6 @@ dependencies:
 description: 'Wrap a job, run a check, get told when it is missed, failed, stuck,
   slow or over budget. The Ruby port of @cronwatch/sdk: same rules, same alerts, same
   stored rows.'
-email: 
 executables: []
 extensions: []
 extra_rdoc_files: []
@@ -107,7 +105,6 @@ metadata:
   bug_tracker_uri: https://github.com/phillips-jon/cronwatch/issues
   documentation_uri: https://cronwatch.dev/docs/ruby/
   rubygems_mfa_required: 'true'
-post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -122,8 +119,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3.1
-signing_key: 
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Cron and scheduled-job monitoring that lives inside your app.
 test_files: []