immunio 1.0.10 → 1.0.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: fe54e75e874948ac23bb4981980420811c7c97a3
-  data.tar.gz: e43529302f807d4035281978c1a4b90bfa2c326c
+  metadata.gz: 8332f83c5bbb9111229ef4d70654b5d2d0999638
+  data.tar.gz: c56b6f5d45976c5025009d59e1f5c96e3215171e
 SHA512:
-  metadata.gz: 3ee656e08aaf902244d38a03653ae3db83d68a23528b981040f2ac6c888b264bc8435db61ded6ffd463b6507199ec99fce765f2e5ec0f883ad68082163e67649
-  data.tar.gz: 6ec875e6850070c952880d48ef282f4a0961fdd91ccba4929cc19fa9d1a4379d9fe714f3a57e3a6036c248fa714dfd5c330168077619263252d3249be4dba4fa
+  metadata.gz: 8116e6f37e1fa87c477f7aeec119de026bc7a4d8c6339e7892f4ad28e106d107c3eb97b6983438794fc5db356a0a39e6ac0cdb72e054957d777b5f9b7c1d8c47
+  data.tar.gz: 1435dd96e75d04aa24d71e54fcc6300b31608891126af5b63c29aeedb6fbb63e1dacb731b481fc1428d6d147eeadbbc5acc6fcea1ec0ed21e87213a7e2932794

data/lib/immunio/plugins/action_view.rb

@@ -197,6 +197,17 @@ module Immunio
         if root
           # This is the root template. Let ActionView render it, and then look
           # for XSS.
+
+          # If the rendered result isn't a string, or a string-like, then let's
+          # skip it for safety sake.
+          unless rendered.respond_to? :to_str
+            unless $__immunio_av_rendered_non_string
+              Immunio.logger.warn { "ActionView rendered #{@template.inspect} to a non-string-like value: #{rendered.inspect}. This rendering will not be analyzed for XSS. Further warnings will be suppressed." }
+              $__immunio_av_rendered_non_string = true
+            end
+            return rendered
+          end
+
           rendered = rendered.to_str
 
           result = run_hook!("template_render_done", {

data/lib/immunio/version.rb

@@ -1,5 +1,5 @@
 module Immunio
   AGENT_TYPE = "agent-ruby"
-  VERSION = "1.0.10"
+  VERSION = "1.0.11"
   VM_VERSION = "2.2.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: immunio
 version: !ruby/object:Gem::Version
-  version: 1.0.10
+  version: 1.0.11
 platform: ruby
 authors:
 - Immunio
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-01-22 00:00:00.000000000 Z
+date: 2016-02-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails