graphomaton 1.0.0 → 1.2.0

data/lib/graphomaton/process_runner.rb

@@ -0,0 +1,153 @@
+# frozen_string_literal: true
+
+require 'open3'
+require 'timeout'
+
+class Graphomaton
+  class ProcessRunner
+    class Error < Graphomaton::Error; end
+    class TimeoutError < Error; end
+    class OutputLimitError < Error; end
+
+    DEFAULT_TIMEOUT = 30
+    DEFAULT_MAX_STDOUT_BYTES = 64 * 1024 * 1024
+    DEFAULT_MAX_STDERR_BYTES = 1024 * 1024
+    READ_SIZE = 16 * 1024
+
+    def self.which(command, path: ENV.fetch('PATH', ''), pathext: ENV.fetch('PATHEXT', ''))
+      name = command.to_s
+      return nil if name.empty? || name.include?("\0")
+
+      explicit = name.include?(File::SEPARATOR) || (File::ALT_SEPARATOR && name.include?(File::ALT_SEPARATOR))
+      directories = explicit ? [''] : path.split(File::PATH_SEPARATOR)
+      extensions = executable_extensions(name, pathext)
+      directories.each do |directory|
+        base = explicit ? name : File.join(directory, name)
+        extensions.each do |extension|
+          candidate = "#{base}#{extension}"
+          return File.expand_path(candidate) if File.file?(candidate) && File.executable?(candidate)
+        end
+      end
+      nil
+    end
+
+    def self.capture3(*command, stdin_data: '', binmode: false, timeout: DEFAULT_TIMEOUT,
+                      max_stdout_bytes: DEFAULT_MAX_STDOUT_BYTES,
+                      max_stderr_bytes: DEFAULT_MAX_STDERR_BYTES)
+      validate_limit(timeout, 'timeout')
+      validate_limit(max_stdout_bytes, 'max_stdout_bytes')
+      validate_limit(max_stderr_bytes, 'max_stderr_bytes')
+
+      spawn_options = Gem.win_platform? ? { new_pgroup: true } : { pgroup: true }
+      stdout_data = nil
+      stderr_data = nil
+      status = nil
+
+      Open3.popen3(*command, **spawn_options) do |stdin, stdout, stderr, wait_thread|
+        streams = [stdin, stdout, stderr]
+        streams.each(&:binmode) if binmode
+        writer = input_writer(stdin, stdin_data)
+        stdout_reader = output_reader(stdout, max_stdout_bytes, 'stdout')
+        stderr_reader = output_reader(stderr, max_stderr_bytes, 'stderr')
+        threads = [writer, stdout_reader, stderr_reader]
+
+        begin
+          Timeout.timeout(timeout, TimeoutError, "Process timed out after #{timeout} seconds") do
+            writer.value
+            stdout_data = stdout_reader.value
+            stderr_data = stderr_reader.value
+            status = wait_thread.value
+          end
+        rescue TimeoutError, OutputLimitError
+          terminate(wait_thread)
+          raise
+        ensure
+          streams.each { |stream| stream.close unless stream.closed? }
+          threads.each do |thread|
+            thread.kill if thread.alive?
+            thread.join
+          end
+        end
+      end
+
+      [stdout_data, stderr_data, status]
+    end
+
+    def self.input_writer(stdin, data)
+      Thread.new do
+        Thread.current.report_on_exception = false
+        begin
+          stdin.write(data)
+        rescue Errno::EPIPE, IOError
+          nil
+        ensure
+          stdin.close unless stdin.closed?
+        end
+      end
+    end
+    private_class_method :input_writer
+
+    def self.output_reader(stream, limit, name)
+      Thread.new do
+        Thread.current.report_on_exception = false
+        output = String.new(encoding: Encoding::BINARY)
+
+        begin
+          loop do
+            chunk = stream.readpartial(READ_SIZE)
+            if output.bytesize + chunk.bytesize > limit
+              raise OutputLimitError, "Process #{name} exceeded #{limit} bytes"
+            end
+            output << chunk
+          end
+        rescue EOFError, IOError
+          output
+        ensure
+          stream.close unless stream.closed?
+        end
+      end
+    end
+    private_class_method :output_reader
+
+    def self.terminate(wait_thread)
+      pid = wait_thread.pid
+      parent_alive = wait_thread.alive?
+      signal_process(pid, 'TERM')
+      parent_alive ? wait_thread.join(0.25) : sleep(0.25)
+      signal_process(pid, 'KILL')
+      wait_thread.join if wait_thread.alive?
+    end
+    private_class_method :terminate
+
+    def self.signal_process(pid, signal)
+      attempts = Gem.win_platform? ? [[9, pid]] : [[signal, -pid], [signal, pid]]
+      attempts.each do |candidate_signal, target|
+        begin
+          Process.kill(candidate_signal, target)
+          return
+        rescue Errno::ESRCH, Errno::ECHILD
+          return
+        rescue Errno::EINVAL, Errno::EPERM
+          next
+        end
+      end
+      nil
+    end
+    private_class_method :signal_process
+
+    def self.validate_limit(value, name)
+      return if value.is_a?(Numeric) && value.real? && value.to_f.finite? && value.positive?
+
+      raise ArgumentError, "#{name} must be a positive finite number"
+    end
+    private_class_method :validate_limit
+
+    def self.executable_extensions(command, pathext)
+      return [''] unless Gem.win_platform? && File.extname(command).empty?
+
+      extensions = pathext.empty? ? %w[.COM .EXE .BAT .CMD] : pathext.split(';').reject(&:empty?)
+      extensions.flat_map { |extension| [extension, extension.downcase] }.uniq
+    end
+    private_class_method :executable_extensions
+  end
+end

data/lib/graphomaton/url_policy.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+require 'uri'
+
+class Graphomaton
+  class UrlPolicy
+    LINK_SCHEMES = %w[http https mailto].freeze
+    ASSET_SCHEMES = %w[https].freeze
+    CONTROL_CHARACTERS = /[\u0000-\u001f\u007f]/
+
+    def self.validate(value, context: 'URL', schemes: LINK_SCHEMES, allow_windows_path: false)
+      url = value.to_s
+      unless valid?(url, schemes: schemes, allow_windows_path: allow_windows_path)
+        raise SecurityError, "Unsafe #{context}: #{value.inspect}"
+      end
+
+      url
+    end
+
+    def self.validate_asset(value, context: 'asset URL')
+      validate(value, context: context, schemes: ASSET_SCHEMES, allow_windows_path: true)
+    end
+
+    def self.valid?(url, schemes: LINK_SCHEMES, allow_windows_path: false)
+      return false if url.empty? || url != url.strip
+      return false if url.match?(CONTROL_CHARACTERS) || url.start_with?('//')
+      return true if allow_windows_path && url.match?(/\A[A-Za-z]:[\\\/]/)
+      return false if url.include?('\\')
+
+      uri = URI.parse(url)
+      return true unless uri.scheme
+
+      schemes.include?(uri.scheme.downcase)
+    rescue URI::InvalidURIError
+      false
+    end
+
+    private_class_method :valid?
+  end
+end

data/lib/graphomaton/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 class Graphomaton
-  VERSION = '1.0.0'
+  VERSION = '1.2.0'
 end