paraxial 1.4.1 → 1.4.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a049e14f86235b3984d52cb9d0401e42ec85deb103ae479df22ee73f52020f76
-  data.tar.gz: a05102fc73df7dc030be7a009de6a77be503aab05722dc7ff23fc8db10246f05
+  metadata.gz: 1ead60a9bfb6d11bc119e5ba5287ce722c2e41b4c61865840bd219a3e4fd4be1
+  data.tar.gz: af7a4ec6f5c52fd468a071fbe98edda8db847ca68e7d50a8fdf7343728e67bf5
 SHA512:
-  metadata.gz: 2f3af29e03215f6315ada3200487edadbd4c8bce1dba0c2ef1ff7dc73af72a1fb870a6474b40276e8a43e89baf94aedd286118bbc052216605bb39226ba67df8
-  data.tar.gz: 10ab830e631b9fa6b550b74a9c88ce87ed4917014574ecd8cbd25acee4fc76401bcc73994e83f73c5b0018641e6ab43f40d700737dbcbe58a2833799eaa8edb3
+  metadata.gz: 604c966182e021b459e5e0e5ed9604b310acb3f31ea2cba61229a2d82b5f2f98ef80500763cd9c724a13cc7327050cea5a83857b5e0a71f32a079666dbb8fc76
+  data.tar.gz: b9c0f345377e3493c2bf699b3f640b9fe3b89db5537dc922489dc5a3e8ce225580c7f582fd3ceca8a8d5e37369b20a1af7c0f45b0e481f9e75f8cac5d849ec44

data/lib/paraxial/cli.rb

@@ -88,7 +88,11 @@ module Paraxial
         m = JSON.parse(response.body)
 
         if m['ok'].nil?
-          puts "[Paraxial] Upload failed, check if PARAXIAL_API_KEY is valid"
+          if m['error']&.start_with?("Free tier limited")
+            puts "[Paraxial] Upload failed, free tier limit reached"
+          else
+            puts "[Paraxial] Upload failed, check if PARAXIAL_API_KEY is valid"
+          end
           exit(1)
         end
 

data/lib/paraxial/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Paraxial
-  VERSION = '1.4.1'
+  VERSION = '1.4.3'
 end

data/lib/paraxial.rb

@@ -4,6 +4,7 @@ require 'thor'
 require 'paraxial/engine'
 require 'rubocop'
 require_relative 'rubocop/cop/paraxial/csrf'
+require_relative 'rubocop/cop/paraxial/csrf_skip'
 require_relative 'rubocop/cop/paraxial/system'
 require_relative 'rubocop/cop/paraxial/send'
 require_relative 'rubocop/cop/paraxial/constantize'

data/lib/rubocop/cop/paraxial/csrf.rb

@@ -2,21 +2,22 @@ module RuboCop
   module Cop
     module Paraxial
       class CSRF < Base
-        MSG = 'CSRF, no protect_from_forgery in ApplicationController.'
+        include RangeHelp
 
-        def_node_search :protect_from_forgery_call, <<~PATTERN
-          (send nil? :protect_from_forgery ...)
-        PATTERN
+        MSG = "CSRF, action_dispatch.cookies_same_site_protection set to `nil` or `:none`."
 
-        def on_class(node)
-          class_name = node.loc.name.source
+        def on_send(node)
+          return unless node.method_name == :cookies_same_site_protection=
 
-          return unless class_name == 'ApplicationController'
+          argument = node.arguments.first
 
-          protect_from_forgery = protect_from_forgery_call(node).first
-
-          add_offense(node) unless protect_from_forgery
+          if !argument.respond_to?(:value)
+            add_offense(node)
+          elsif argument.value == :none
+            add_offense(node)
+          end
         end
+
       end
     end
   end

data/lib/rubocop/cop/paraxial/csrf_skip.rb

@@ -0,0 +1,28 @@
+module RuboCop
+  module Cop
+    module Paraxial
+      class SkipAuthenticityToken < Base
+
+        MSG = "CSRF, skip_before_action :verify_authenticity_token in controller."
+
+        def on_send(node)
+          # Ensure that the cop only applies to controller files
+          return unless in_controller_file?
+
+          # Check if the node is `skip_before_action :verify_authenticity_token`
+          return unless node.method_name == :skip_before_action
+          return unless node.arguments.any? { |arg| arg.respond_to?(:value) && arg.value == :verify_authenticity_token }
+
+          add_offense(node)
+        end
+
+        private
+
+        def in_controller_file?
+          # Check the current file path to ensure it's a controller file
+          processed_source.file_path.include?('app/controllers')
+        end
+      end
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: paraxial
 version: !ruby/object:Gem::Version
-  version: 1.4.1
+  version: 1.4.3
 platform: ruby
 authors:
 - Michael Lubas
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-12-04 00:00:00.000000000 Z
+date: 2025-01-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec
@@ -104,6 +104,7 @@ files:
 - lib/paraxial/version.rb
 - lib/rubocop/cop/paraxial/constantize.rb
 - lib/rubocop/cop/paraxial/csrf.rb
+- lib/rubocop/cop/paraxial/csrf_skip.rb
 - lib/rubocop/cop/paraxial/html_safe.rb
 - lib/rubocop/cop/paraxial/raw.rb
 - lib/rubocop/cop/paraxial/send.rb