fingerly 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5dbd638d3731d3062c062b00a80a0ef4904b486ecf96c91426b0f0ba9ff613cd
-  data.tar.gz: 1a4759ace195de23f5c08cbadd10a5df576ce0093897f32cfb291fa0441335b0
+  metadata.gz: 92e4046da9469b62150fc3f50c8091ce69e86a62be2114916ed2e40e5bb90f98
+  data.tar.gz: ac9d6f5c1d51ffd832b6c5e14d86c44a46c224a1a4e5e5467859470fcd049638
 SHA512:
-  metadata.gz: 0da74c52537b8f8091458938f8057536521b295de0df1b13b9af832f4d8cc138365acd2356f425ff9148f9b3977c54ec8c7d9b49de5f336c991901f22aee13fb
-  data.tar.gz: 310aa51b0aa74788d7a694075e8802182c275663d8b38260cda66faec16b383e165b38da542dc414be5d1fff5f5e692ef7c8bbf6cd178412660d2ea7e65232ee
+  metadata.gz: 58aec6cc043aa8e471b9e9923d1e4876a13d01f699df69f227a73ae93d9faf26ce8c58fc71d2589081b01324778074b0b9fa2f209525153cf909495d15d8f832
+  data.tar.gz: 76f501fae45401d8ffafacc3c62b793414dcfbe72c157106cca3f800b81cc82e05a802315d37644ee7e4f34941e40df8c196249fdab03cd183f1f326cb444101

data/README.md

@@ -317,7 +317,7 @@ the server's or the load balancer's own limit as well. Falcon streams the body,
 so there the proxy stops reading at the limit. Only the content type, the
 visitor metadata Fingerly needs, and an `Idempotency-Key` are forwarded;
 customer cookies and authorization headers never are. The proxy reports itself
-upstream as `ruby/0.1.0` in `x-fingerly-proxy-version`, which the dashboard
+upstream as `ruby/0.1.1` in `x-fingerly-proxy-version`, which the dashboard
 shows per proxy.
 
 When Fingerly cannot be reached, the visitor gets a gateway error rather than

data/lib/fingerly/client.rb

@@ -187,7 +187,12 @@ module Fingerly
     #   past retention.
     # @raise [TimeoutError] if the request exceeds the client timeout
     def get(request_id)
-      raise ConfigurationError, "request_id is required" if request_id.to_s.empty?
+      # URL parsers resolve a dot segment even when it is percent-encoded, so
+      # escaping cannot keep these in the path: "." and the empty id would name
+      # the list route, and ".." a route above it, secret key attached.
+      if ["", ".", ".."].include?(request_id.to_s)
+        raise ConfigurationError, "request_id is not a Fingerly request id"
+      end
 
       Event.new(@client.get("/events/#{Events.escape(request_id)}"))
     end

data/lib/fingerly/version.rb

@@ -2,5 +2,5 @@
 
 module Fingerly
   # The SDK version, reported to the API on every request.
-  VERSION = "0.1.0"
+  VERSION = "0.1.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: fingerly
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Fingerly