paraxial 1.1.0 → 1.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8fc606825a60ae6e756bf7fda0fb6d3434e88075e8afe0ba1be0ab64c62304af
-  data.tar.gz: 5e4daf86eb7f58a60abe6e3f3497381c9e4e4c70a289a230ec25a72a1427e7ad
+  metadata.gz: 0b27974dfe877ee32f7c49718c18916c39c6d13dff2b1fd0087b8da359207713
+  data.tar.gz: d93d8ab5654d522f8093f998afa5f65fc77c7abc363bd89c377dccca8b140bb3
 SHA512:
-  metadata.gz: a8e809b4362e4182f23c1a997fb20dd3c05ec6dea16ae6e41d6f6b276a82334543abb223f5634bb5560dcc725059d7306f50a153ea373368f8be9cdab18eb521
-  data.tar.gz: 1228d5f5ada089b496fe408fb6f4725733966adeb700948947195942ef7a13da8adda0c39e32575ac1d08632f594d72ac6fe374f6d88cca7a3cfd8d6338cb6d1
+  metadata.gz: 0e0e45aece62762e91542544721c3ff73ee9c0de01ee0215793ae2f4120cd9b21de34a392c0ab805805720e7955befb8a99d9a6ffa9a57571d95c73d5ebed34c
+  data.tar.gz: 242039eabbd12a31d0c5e48f0c7b63a18b559ec5f49d867ff7dabcd6fe81398ba8fb8e47f08cb6c1c43f3beecd94e71e62eff014acc83afb2ae718ce1864b2b3

data/lib/paraxial/cli.rb

@@ -39,6 +39,25 @@ module Paraxial
         puts '[Paraxial] .paraxial-rubocop.yml is valid, .erb files will be scanned.'
       end
 
+      paraxial_config = get_paraxial_configuration
+
+      if paraxial_config && paraxial_config["ignore-gems"]
+        puts '[Paraxial] .paraxial.yml configuration file found.'
+        puts '[Paraxial] Gems ignored by dependency scan:'
+        puts paraxial_config["ignore-gems"]
+      elsif paraxial_config == :error
+        puts '[Paraxial] .paraxial.yml file is not well formed and is being ignored.'
+        paraxial_config = false
+      elsif paraxial_config
+        puts '[Paraxial] .paraxial.yml does not define a valid configuration. Using default configuration.'
+        paraxial_config = false
+      elsif paraxial_config == false
+        puts '[Paraxial] .paraxial.yml configuration file was not found. Using default configuration.'
+      else
+        puts '[Paraxial] .paraxial.yml configuration is empty. Using default configuration.'
+        paraxial_config = false
+      end
+
       if Paraxial::Helpers.get_api_key.nil?
         puts '[Paraxial] Environment variable PARAXIAL_API_KEY not found'
       else
@@ -64,7 +83,7 @@ module Paraxial
         uri = URI.parse(Paraxial::Helpers.get_paraxial_url + '/api/ruby_scan')
         headers = { 'Content-Type': 'application/json' }
 
-        body = { rubocop: rubocop, lockfile: lockfile, api_key: api_key, timestamp: Paraxial.get_timestamp }
+        body = { rubocop: rubocop, lockfile: lockfile, api_key: api_key, paraxial_config: paraxial_config, timestamp: Paraxial.get_timestamp }
         response = Net::HTTP.post(uri, body.to_json, headers)
         m = JSON.parse(response.body)
 
@@ -130,6 +149,18 @@ module Paraxial
 
     private
 
+    def get_paraxial_configuration
+      config_file = File.join(Dir.pwd, '.paraxial.yml')
+
+      return false unless File.exist?(config_file)
+
+      begin
+        YAML.load_file(config_file)
+      rescue
+        :error
+      end
+    end
+
     def check_rubocop_configuration
       # return values:
       # :does_not_exist, :found_no_erb, :found_with_erb

data/lib/paraxial/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Paraxial
-  VERSION = '1.1.0'
+  VERSION = '1.3.0'
 end

data/lib/paraxial.rb

@@ -21,17 +21,26 @@ module Paraxial
   class Error < StandardError; end
   # Your code goes here...
 
-  class Defense
-    def initialize(app)
+  class PHPAttackMiddleware
+    VALID_LENGTHS = [:hour, :day, :week, :infinity]
+
+    def initialize(app, length: :hour)
       @app = app
+      if VALID_LENGTHS.include?(length)
+        @ban_length = length
+      else
+        puts "[Paraxial] PHPAttackMiddleware invalid ban length: #{length}, using hour"
+        @ban_length = :hour
+      end
     end
 
     def call(env)
-      request_path = env['PATH_INFO']
+      request = ActionDispatch::Request.new(env)
 
-      if request_path.end_with?('.php')
+      if request.path.downcase.end_with?('.php')
+        Paraxial.ban_ip_msg(request.remote_ip, @ban_length, "Sent request ending in .php")
         # Return a 404 response if the request path ends with '.php'
-        [404, { 'Content-Type' => 'text/plain' }, ['Not Found from Paraxial.io']]
+        [404, { 'Content-Type' => 'text/plain' }, ['Not Found']]
       else
         # Pass the request to the next middleware or the application
         @app.call(env)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: paraxial
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 1.3.0
 platform: ruby
 authors:
 - Michael Lubas
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-10-30 00:00:00.000000000 Z
+date: 2024-11-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec