immunio 1.1.5 → 1.1.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 1892a99bb27797888c8589ad7404d94c8bff8d92
-  data.tar.gz: b278c5b969f0431650d241b0a26499513a469b3a
+  metadata.gz: 26f001c2c60f9b1529d0b5e98c0352b7171f0efc
+  data.tar.gz: b4ce5d424d95435e048057766fbff2f86862c2cc
 SHA512:
-  metadata.gz: 177fe3c9024f2bc8ac4451eb8913c6c7c9c54a32592b2f33aa19d17eaf14c747786b1f180d22d56e8600f91186a840d6c2077e608336585b1d70538769ccbf15
-  data.tar.gz: 86adfa4ca69c87354f8d8d6bbc01d01d78c98958b3bd9e0ada2d406e95a70489c5e722c42a730ed65848ea0fda4a1882b1090b91e08c8733291f91f4b77ad878
+  metadata.gz: 63ca57ac77abbd1488c5dd425a91c3faa95c7ae87ccd43798279246f013dac88c957fccc200876cdd8b7077748452819986ddb95ba0a534274808ee89ed9630d
+  data.tar.gz: 8fb5fc3f10c09fabe8cbbac5cb288e7563b37fbe6f60c51a3f68801f2a19fdcf592498c71cfda0d0d116ec13dfa5b9a82b4e77e47750c6221b9da00bb812b231

data/lib/immunio/agent.rb

@@ -7,9 +7,11 @@ require_relative "processor"
 module Immunio
   @agent = nil
 
+  CODE_PROTECTION_PLUGINS = %w(xss file_io redirect sqli shell_command).freeze
+
   # Plugins that are enabled by default. Override using the `plugins_enabled`
   # and `plugins_disabled` configuration settings.
-  DEFAULT_PLUGINS = ["xss", "file_io", "redirect", "sqli", "shell_command"]
+  DEFAULT_PLUGINS = CODE_PROTECTION_PLUGINS.dup.freeze
 
   CONFIG_FILENAME = "immunio.yml"
 
@@ -70,6 +72,13 @@ module Immunio
     # purposes.
     config_accessor :vm_data
 
+    # When false (default), this will prevent hooking for code
+    # protection (xss, file_io, redirect, sqli and shell_command) and this
+    # will prevent them from being enabled individually.
+    # When true, plugins can still be disabled. However, if not enabled in
+    # the backend, the hook vm code will be missing.
+    config_accessor :code_protection_plugins_enabled
+
     def initialize
       Immunio.logger.info { "Initializing agent version #{VERSION} for process #{Process.pid}" }
 
@@ -95,6 +104,7 @@ module Immunio
       # Default to empty lists for enabled and disabled
       config.plugins_enabled = []
       config.plugins_disabled = []
+      config.code_protection_plugins_enabled = false
       config.agent_enabled = true
       config.safe_script_tag_contexts = []
       config.vm_data = {}
@@ -208,6 +218,10 @@ module Immunio
     end
 
     def plugin_enabled?(plugin)
+      if CODE_PROTECTION_PLUGINS.include?(plugin)
+        return false unless config.code_protection_plugins_enabled
+      end
+
       # Check if the specified `plugin` is enabled based on the Agent config.
       config.plugins_active.member?(plugin)
     end

data/lib/immunio/version.rb

@@ -1,5 +1,5 @@
 module Immunio
   AGENT_TYPE = "agent-ruby"
-  VERSION = "1.1.5"
+  VERSION = "1.1.6"
   VM_VERSION = "2.2.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: immunio
 version: !ruby/object:Gem::Version
-  version: 1.1.5
+  version: 1.1.6
 platform: ruby
 authors:
 - Immunio
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-11-30 00:00:00.000000000 Z
+date: 2017-01-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -465,7 +465,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.4
+rubygems_version: 2.4.5.1
 signing_key: 
 specification_version: 4
 summary: Immunio Ruby agent