julewire-redaction 1.0.1 → 1.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c7bdfc6ae7b8133214010654d51e0a49fa1705a3003ab4fc7ed6c1d40d369b8e
-  data.tar.gz: f5556960b5a213306fff6df6bfa0b9dc6ea8fb01ffb7f0d189b04ab46d5e8157
+  metadata.gz: a86f67b65bb42fc7873df8effd2319e85afca0fa93519902c11d61d824398a4b
+  data.tar.gz: 3a26f5d4761d4e81e0791a229e44111712293c7fcd50c5572c391824c551599a
 SHA512:
-  metadata.gz: 6aca1efb87778d569316d66ab61ea6fb709f1eff8a8b10b4a42fd4f8609443df867445e2fff27989df4939123a518531cc3c82f86bedaeec6426cd82e64b2411
-  data.tar.gz: 895412edbf1b69b653ceb24c9c224b7fee2c42ea21edb649ac9d4b05bafcf92694d1b034a40188e004c1a902abc0415733b744a78bbf771d7867a244c821606f
+  metadata.gz: 4f521e8774ef159420c20a00d144e6abcec54e2f4b31769c63dd7c3a98e6276b58225550b5e29bf554d55ab914cc1d89859cd0ed3cf98fc047e260cda50d66f6
+  data.tar.gz: b8dfed70ac1559d9c596d4fb9470cd1656924e273be0f8f7de9b56dd8d936889b064550e8e5af17a64d161c4859afa35b2ec0458016028fcb0dee941d45d097c

data/CHANGELOG.md

@@ -1,5 +1,15 @@
 ## Unreleased
 
+## 1.1.1 - 2026-07-26
+
+- Refresh the tested dependency lockset.
+
+## 1.1.0 - 2026-07-20
+
+- Match path filters against both section-prefixed and section-relative paths.
+- Keep bounded redaction metadata aligned with core truncation contracts.
+- Require julewire-core 1.1.0.
+
 ## 1.0.1 - 2026-06-25
 
 - Require julewire-core 1.0.1.

data/julewire-redaction.gemspec

@@ -32,6 +32,6 @@ Gem::Specification.new do |spec|
   spec.executables = []
   spec.require_paths = ["lib"]
 
-  spec.add_dependency "julewire-core", ">= 1.0.1"
+  spec.add_dependency "julewire-core", ">= 1.1.0"
   spec.add_dependency "zeitwerk", ">= 2.8.1"
 end

data/lib/julewire/redaction/processor.rb

@@ -32,9 +32,7 @@ module Julewire
                                authorization_header: authorization_header
                              )
                            end
-        @redact_keys = !@matcher.empty?
-        @redact_scalars = @string_redactor || !@blocks.empty?
-        @enabled = @redact_keys || @redact_scalars
+        @enabled = !@matcher.empty? || @string_redactor || !@blocks.empty?
         @record_transform = Core::Processing::RecordFieldTransform.new(
           max_array_items: @max_array_items,
           max_depth: @max_depth,
@@ -72,29 +70,30 @@ module Julewire
         end
       end
 
-      def redact_item(item, key:, path:, original:, prefixed_path:, **)
+      def redact_item(item, key:, original:, path:, prefixed_path:, **)
         return @mask if redacted_key?(key, path: path, prefixed_path: prefixed_path)
-        if @redact_scalars && !item.is_a?(Hash) && !item.is_a?(Array)
-          return redact_scalar(item, key: key, original: original)
-        end
 
-        Core::Serialization::BoundedTransform::CONTINUE
+        if !item.instance_of?(Hash) && !item.instance_of?(Array)
+          redact_scalar(item, key: key, original: original)
+        else
+          Core::Serialization::BoundedTransform::CONTINUE
+        end
       end
 
       def redacted_key?(key, path:, prefixed_path:)
-        return false unless @redact_keys && key
-        return true if @matcher.match?(key, path: path)
+        return true if key && @matcher.match?(key, path: path)
 
-        prefixed_path && @matcher.match?(key, path: prefixed_path)
+        prefixed_path && @matcher.match?(nil, path: prefixed_path)
       end
 
       def redact_scalar(value, key:, original:)
         value = apply_block_filters(key, value, original) if key && !@blocks.empty?
-        value.is_a?(String) && @string_redactor ? @string_redactor.call(value) : value
+        @string_redactor ? @string_redactor.call(value) : value
       end
 
       def apply_block_filters(key, value, original)
-        key_copy = key.to_s.dup
+        key_copy = +""
+        key_copy.concat(key.to_s)
         value_copy = duplicate_filter_value(value)
         @blocks.each do |block|
           block.arity == 2 ? block.call(key_copy, value_copy) : block.call(key_copy, value_copy, original)

data/lib/julewire/redaction/string_redactor.rb

@@ -7,7 +7,6 @@ module Julewire
         @matcher = matcher
         @mask = mask.to_s
         @authorization_header = authorization_header
-        @redact_headers = @authorization_header || !@matcher.empty?
         @redact_pairs = !@matcher.empty?
       end
 
@@ -19,12 +18,10 @@ module Julewire
         return value unless redaction_possible?(has_colon, has_equals)
 
         redacted = value.dup
-        redact_header_lines!(redacted) if header_redaction_possible?(has_colon)
-        return redacted unless @redact_pairs
-        return redacted unless @matcher.string_key_possible?(value)
-
-        redact_json_pairs!(redacted) if json_pair_possible?(value, has_colon)
-        redact_form_pairs!(redacted) if form_pair_possible?(has_equals)
+        redact_header_lines!(redacted) if has_colon
+        if @redact_pairs && @matcher.string_key_possible?(value)
+          redact_pair_values!(value, redacted, has_colon: has_colon, has_equals: has_equals)
+        end
         redacted
       end
 
@@ -35,23 +32,20 @@ module Julewire
       end
 
       def header_redaction_possible?(has_colon)
-        @redact_headers && has_colon
+        @authorization_header && has_colon
       end
 
-      def json_pair_possible?(value, has_colon)
-        @redact_pairs && has_colon && (value.include?('"') || value.include?("'"))
-      end
-
-      def form_pair_possible?(has_equals)
-        @redact_pairs && has_equals
+      def redact_pair_values!(value, redacted, has_colon:, has_equals:)
+        redact_json_pairs!(redacted) if has_colon && (value.include?('"') || value.include?("'"))
+        redact_form_pairs!(redacted) if has_equals
       end
 
       def redact_header_lines!(value)
-        value.gsub!(/(^|[\r\n])([A-Za-z0-9-]+:\s*)(?:"[^"\r\n]*"|[^\r\n]*)/i) do |line|
-          name = Regexp.last_match(2).split(":", 2).fetch(0)
+        value.gsub!(/(\A|[\r\n])([A-Za-z0-9-]+)(:\s*)[^\r\n]*/) do |line|
+          name = Regexp.last_match(2)
           next line unless redact_header?(name)
 
-          "#{Regexp.last_match(1)}#{Regexp.last_match(2)}#{@mask}"
+          "#{Regexp.last_match(1)}#{Regexp.last_match(2)}#{Regexp.last_match(3)}#{@mask}"
         end
       end
 
@@ -63,7 +57,7 @@ module Julewire
 
       def redact_json_pairs!(value)
         # Defense-in-depth for short log strings; large bodies should stay bounded.
-        value.gsub!(/(["'])([^"']+)\1(\s*:\s*)(["'])(.*?)\4/i) do |pair|
+        value.gsub!(/(["'])([^"']+)\1(\s*:\s*)(["'])(?:.*?)\4/) do |pair|
           next pair unless @matcher.match?(Regexp.last_match(2))
 
           "#{Regexp.last_match(1)}#{Regexp.last_match(2)}#{Regexp.last_match(1)}" \
@@ -72,7 +66,7 @@ module Julewire
       end
 
       def redact_form_pairs!(value)
-        value.gsub!(/(^|[?&\s])([^?&\s"=]+)(=)([^&\s"]+)/i) do |pair|
+        value.gsub!(/(\A|[?&\s])([^?&\s"=]+)(=)(?:[^&\s"]+)/) do |pair|
           next pair unless @matcher.match?(Regexp.last_match(2))
 
           "#{Regexp.last_match(1)}#{Regexp.last_match(2)}#{Regexp.last_match(3)}#{@mask}"

data/lib/julewire/redaction/version.rb

@@ -2,6 +2,6 @@
 
 module Julewire
   module Redaction
-    VERSION = "1.0.1"
+    VERSION = "1.1.1"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: julewire-redaction
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 1.1.1
 platform: ruby
 authors:
 - Alexander Grebennik
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.1
+        version: 1.1.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.1
+        version: 1.1.0
 - !ruby/object:Gem::Dependency
   name: zeitwerk
   requirement: !ruby/object:Gem::Requirement
@@ -83,7 +83,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.14
+rubygems_version: 4.0.16
 specification_version: 4
 summary: Structured redaction processor for Julewire.
 test_files: []