immunio 1.1.2 → 1.1.5

data/lua-hooks/ext/sysutils/module.mk

@@ -0,0 +1,2 @@
+SRC += \
+	ext/sysutils/lua_utils.c

data/lua-hooks/lib/boot.lua

@@ -1,3 +1,4 @@
+-- boot.lua
 VM_VERSION = 1
 -- Global reference to hold the VM itself.
 VM = nil
@@ -22,7 +23,7 @@ function sandboxed_call(method, vars)
     -- utils.debug_dump("Merge vars from agent: ", vars)
     for k, v in pairs(vars) do
       if k ~= "utils" then -- XXX agent API compatability. Ignore utils.
-        _G[k] = v
+        rawset(_G, k, v)
       end
     end
   end

data/lua-hooks/lib/hooks/module.mk

@@ -0,0 +1,31 @@
+MODULES := lib/hooks/xss
+
+LUA_SRC += \
+	lib/hooks/authenticate.lua \
+	lib/hooks/bad_cookie.lua \
+	lib/hooks/custom_event.lua \
+	lib/hooks/custom_threat.lua \
+	lib/hooks/encode.lua \
+	lib/hooks/eval.lua \
+	lib/hooks/exception.lua \
+	lib/hooks/file_io.lua \
+	lib/hooks/framework_csrf_check.lua \
+	lib/hooks/framework_login.lua \
+	lib/hooks/framework_password_reset.lua \
+	lib/hooks/framework_account_created.lua \
+	lib/hooks/framework_redirect.lua \
+	lib/hooks/framework_session.lua \
+	lib/hooks/framework_user.lua \
+	lib/hooks/framework_route.lua \
+	lib/hooks/framework_bad_response_header.lua \
+	lib/hooks/http_request_finish.lua \
+	lib/hooks/http_request_start.lua \
+	lib/hooks/http_response_start.lua \
+	lib/hooks/mongodb_execute.lua \
+	lib/hooks/should_report.lua \
+	lib/hooks/sql_execute.lua \
+	lib/hooks/template_render_done.lua \
+	lib/hooks/xss/escape.lua \
+	lib/hooks/xss/escape_js.lua \
+
+include $(patsubst %, %/module.mk,$(MODULES))

data/lua-hooks/lib/hooks/xss/module.mk

@@ -0,0 +1,4 @@
+LUA_SRC += \
+	lib/hooks/xss/escape.lua \
+	lib/hooks/xss/escape_js.lua \
+	lib/hooks/xss/html_const.lua

data/lua-hooks/lib/lexers/module.mk

@@ -0,0 +1,10 @@
+LUA_SRC += \
+	lib/lexers/bash_dqstr.lua \
+	lib/lexers/bash.lua \
+	lib/lexers/css_attr.lua \
+	lib/lexers/css.lua \
+	lib/lexers/html.lua \
+	lib/lexers/html_entities.lua \
+	lib/lexers/html_entities_ws.lua \
+	lib/lexers/javascript.lua \
+	lib/lexers/markers.lua

data/lua-hooks/lib/module.mk

@@ -0,0 +1,38 @@
+MODULES := lib/hooks lib/lexers lib/schema
+
+LUA_SRC += \
+	lib/base64.lua \
+	lib/bit.lua \
+	lib/cookie.lua \
+	lib/counters.lua \
+	lib/DataDumper.lua \
+	lib/date.lua \
+	lib/defence.lua \
+	lib/diag.lua \
+	lib/extensions.lua \
+	lib/globtopattern.lua \
+	lib/hmac.lua \
+	lib/hooks.lua \
+	lib/idn.lua \
+	lib/ip.lua \
+	lib/lexgraph.lua \
+	lib/lexer.lua \
+	lib/lru.lua \
+	lib/neturl.lua \
+	lib/pathname.lua \
+	lib/perf.lua \
+	lib/permit.lua \
+	lib/profiler.lua \
+	lib/real_ip.lua \
+	lib/sanitize_sql.lua \
+	lib/sanitize_command.lua \
+	lib/semver.lua \
+	lib/sha1.lua \
+	lib/snap.lua \
+	lib/term.lua \
+	lib/tracking.lua \
+	lib/useragent.lua \
+	lib/utils.lua \
+	lib/verb_tamper.lua
+
+include $(patsubst %, %/module.mk,$(MODULES))

data/lua-hooks/lib/schema/module.mk

@@ -0,0 +1,3 @@
+LUA_SRC += \
+	lib/schema/request_schema.lua \
+	lib/schema/validation.lua

data/lua-hooks/options.mk

@@ -0,0 +1,59 @@
+# Place for all the compile/linker flags so we get a consistent build
+
+##############################################################################
+# Host system detection.
+##############################################################################
+
+ifeq (Windows,$(findstring Windows,$(OS))$(MSYSTEM)$(TERM))
+  HOST_SYS= Windows
+  HOST_RM= del
+else
+  HOST_SYS:= $(shell uname -s)
+  ifneq (,$(findstring MINGW,$(HOST_SYS)))
+    HOST_SYS= Windows
+    HOST_MSYS= mingw
+  endif
+  ifneq (,$(findstring CYGWIN,$(HOST_SYS)))
+    HOST_SYS= Windows
+    HOST_MSYS= cygwin
+  endif
+  # Use Clang for OSX host.
+  ifeq (Darwin,$(HOST_SYS))
+    DEFAULT_CC= clang
+  endif
+endif
+
+CROSS =
+CC = $(CROSS)cc
+AR = $(CROSS)ar
+
+UNSAFE_FLAG = -DLUA_UNSAFE_MODE
+
+# There is a huge performance advantage compiling sha1.c with just -O
+# -O2 or -O3 *reduce* the speed of the algorithm 30%
+OPTIMIZE_NONE = -O
+OPTIMIZE_FULL = -O3
+
+INCS = -Iext -Iext/luajit/src
+LIBS = -lm
+ifneq (mingw, $(HOST_MSYS))
+	LIBS += -ldl
+endif
+
+ifneq ($(strip $(CXX_SRC)),)
+	LIBS += -lstdc++
+endif
+
+
+
+XCFLAGS =
+CFLAGS = -DLUA_USE_APICHECK -DLUAJIT -Dlua_assert=assert -Wall -fPIC ${INCS} ${XCFLAGS}
+CXXFLAGS = -std=c++11 ${CFLAGS}
+LDFLAGS = 
+
+
+LUAJIT_XCFLAGS = -fPIC
+ifeq (${HOST_SYS}, Darwin)
+	# Disable the JIT on OS X
+	LUAJIT_XCFLAGS += -DLUAJIT_ENABLE_GC64
+endif

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: immunio
 version: !ruby/object:Gem::Version
-  version: 1.1.2
+  version: 1.1.5
 platform: ruby
 authors:
 - Immunio
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-10-28 00:00:00.000000000 Z
+date: 2016-11-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -177,6 +177,7 @@ files:
 - lua-hooks/ext/libinjection/libinjection_xss.c
 - lua-hooks/ext/libinjection/libinjection_xss.h
 - lua-hooks/ext/libinjection/lualib.c
+- lua-hooks/ext/libinjection/module.mk
 - lua-hooks/ext/lpeg/HISTORY
 - lua-hooks/ext/lpeg/lpcap.c
 - lua-hooks/ext/lpeg/lpcap.h
@@ -192,17 +193,20 @@ files:
 - lua-hooks/ext/lpeg/lpvm.c
 - lua-hooks/ext/lpeg/lpvm.h
 - lua-hooks/ext/lpeg/makefile
+- lua-hooks/ext/lpeg/module.mk
 - lua-hooks/ext/lpeg/re.html
 - lua-hooks/ext/lpeg/test.lua
 - lua-hooks/ext/lua-cmsgpack/.gitignore
 - lua-hooks/ext/lua-cmsgpack/CMakeLists.txt
 - lua-hooks/ext/lua-cmsgpack/README.md
 - lua-hooks/ext/lua-cmsgpack/lua_cmsgpack.c
+- lua-hooks/ext/lua-cmsgpack/module.mk
 - lua-hooks/ext/lua-cmsgpack/test.lua
 - lua-hooks/ext/lua-snapshot/LICENSE
 - lua-hooks/ext/lua-snapshot/Makefile
 - lua-hooks/ext/lua-snapshot/README.md
 - lua-hooks/ext/lua-snapshot/dump.lua
+- lua-hooks/ext/lua-snapshot/module.mk
 - lua-hooks/ext/lua-snapshot/snapshot.c
 - lua-hooks/ext/luajit/COPYRIGHT
 - lua-hooks/ext/luajit/Makefile
@@ -376,6 +380,7 @@ files:
 - lua-hooks/ext/luajit/src/lj_str.h
 - lua-hooks/ext/luajit/src/lj_strfmt.c
 - lua-hooks/ext/luajit/src/lj_strfmt.h
+- lua-hooks/ext/luajit/src/lj_strfmt_num.c
 - lua-hooks/ext/luajit/src/lj_strscan.c
 - lua-hooks/ext/luajit/src/lj_strscan.h
 - lua-hooks/ext/luajit/src/lj_tab.c
@@ -415,16 +420,30 @@ files:
 - lua-hooks/ext/luajit/src/xedkbuild.bat
 - lua-hooks/ext/luautf8/README.md
 - lua-hooks/ext/luautf8/lutf8lib.c
+- lua-hooks/ext/luautf8/module.mk
 - lua-hooks/ext/luautf8/unidata.h
+- lua-hooks/ext/module.mk
+- lua-hooks/ext/modules.h
 - lua-hooks/ext/perf/luacpu.c
 - lua-hooks/ext/perf/lualoadavg.c
 - lua-hooks/ext/perf/luameminfo.c
 - lua-hooks/ext/perf/luaoslib.c
+- lua-hooks/ext/perf/module.mk
 - lua-hooks/ext/sha1/luasha1.c
+- lua-hooks/ext/sha1/module.mk
 - lua-hooks/ext/sha1/sha1.c
 - lua-hooks/ext/sha2/luasha256.c
+- lua-hooks/ext/sha2/module.mk
 - lua-hooks/ext/sha2/sha256.c
+- lua-hooks/ext/sysutils/lua_utils.c
+- lua-hooks/ext/sysutils/module.mk
 - lua-hooks/lib/boot.lua
+- lua-hooks/lib/hooks/module.mk
+- lua-hooks/lib/hooks/xss/module.mk
+- lua-hooks/lib/lexers/module.mk
+- lua-hooks/lib/module.mk
+- lua-hooks/lib/schema/module.mk
+- lua-hooks/options.mk
 homepage: http://immun.io/
 licenses:
 - Immunio