paraxial 0.6.0 → 0.8.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2ef49572c0555fdaea4bc13d94f4faa2d771a9919ee54304d832b5b97306cc09
-  data.tar.gz: 3bd3f48e2517d1c309e8c57ec8814a6bf9077506c461904c5f38f1ecc7e35dd3
+  metadata.gz: a8acee8353bb32e2bebce880b05661b968904d02f9e0748b6041325d8f24491b
+  data.tar.gz: 4ef0694246bc93ae69c1f88a439be89e5fdbd29bcd0ee53406de63d19a791257
 SHA512:
-  metadata.gz: 6ed1f565c95cffdc6e8940d2c92c1cee7c7cd6157fe5da9f304746a65c1687ca74141483add2ca13616cfe82371a27b396ae4fcb178dffb80cac014ace5ac152
-  data.tar.gz: aa3ab3d9ff75cd0ff804a859eebd847ca60d2be053dd004c963d7ed612296d7a574691accfdd26b2788126c94ad9d6311a0f77d9d4dc44d97cb169bd26f6d015
+  metadata.gz: 8127e330796dcea327b3b8b029831c4b851e548df33bf114a4a7b07039e34ed1f48687525747ce11ce08298771a28f95edc0d420bae07d776f08e5b812fdd566
+  data.tar.gz: 40a7c37df1123e0f8dfc87d31e950f8fc35fbea1729f436405ae18c8af9d1f77d76217450e0e21cb44fd3a713afb6bf49d16bcfda8f5ad5ab00c87c42e492712

data/lib/paraxial/initializers/marshal_patch.rb

@@ -4,7 +4,7 @@ unless Rails.env.test? || File.basename($0) == 'rake' || defined?(Rails::Generat
       alias_method :original_load, :load
 
       def load(source, proc = nil)
-        exg = Paraxial.configuration.exploit_guard
+        exg = Paraxial.configuration&.exploit_guard || nil
         if [:monitor, :block].include?(exg)
           if source.is_a?(String) && source.match?(/ActionView|Net::BufferedIO|ERB|ActiveSupport/)
             puts "[Paraxial] Exploit Guard triggered, malicious input to Marshal.load"

data/lib/paraxial/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Paraxial
-  VERSION = '0.6.0'
+  VERSION = '0.8.0'
 end

data/lib/paraxial.rb

@@ -83,7 +83,7 @@ module Paraxial
 
   def self.check_exploit_guard
     if configuration.nil?
-      puts "[Paraxial] Exploit Guard, no config exists, will not run"
+      puts "[Paraxial] Exploit Guard, no configuration exists, will not run"
       return
     end
 
@@ -95,7 +95,7 @@ module Paraxial
     when nil
       puts "[Paraxial] Exploit Guard, not configured, will not run"
     else
-      puts "[Paraxial] Exploit Guard, bad value"
+      puts "[Paraxial] Exploit Guard, bad configuration value: #{configuration.exploit_guard}, will not run"
     end
   end
 

data/lib/rubocop/cop/paraxial/html_safe.rb

@@ -2,7 +2,7 @@ module RuboCop
   module Cop
     module Paraxial
       class HTMLSafe < Base
-        MSG = '`html_safe` leads to XSS when called on user input'
+        MSG = '`html_safe` leads to XSS when called on user input.'
 
         def on_send(node)
           method_name = node.method_name

data/lib/rubocop/cop/paraxial/raw.rb

@@ -2,7 +2,7 @@ module RuboCop
   module Cop
     module Paraxial
       class Raw < Base
-        MSG = '`raw` leads to XSS when called on user input'
+        MSG = '`raw` leads to XSS when called on user input.'
 
         def on_send(node)
           method_name = node.method_name

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: paraxial
 version: !ruby/object:Gem::Version
-  version: 0.6.0
+  version: 0.8.0
 platform: ruby
 authors:
 - Michael Lubas
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-09-04 00:00:00.000000000 Z
+date: 2024-09-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec