private_address_check 0.5.0 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 56efdc9f53367a9a51247cab85795bf6928aba58030b28cf09d1aec3db79e3c0
-  data.tar.gz: 6addbfe12464ff1b66ae49d77151b7e7eeceec21e04af71ff48cfbceccca300d
+  metadata.gz: 80f91ab01d128b94694e76560baf0806989361b3b7d309114a1f67d11bb6a4b2
+  data.tar.gz: ca825b1679b5fa3399234bb375573943710040ece8a8950abef4ac95b2242f3b
 SHA512:
-  metadata.gz: 0aa89cd6d220c3a0a46b3cbb0ee0692c669b5204f3e88076eee1ce0da24ab48750dbd77f446e277adf96dfcfa404234966b10c77295451527679634d8db6f958
-  data.tar.gz: e793ca0fe49c9c402bcc9960182ff5ac1d82c1dfa06705fb04957ae0a2e6653372c024e27fded055351d0232985bd770dbf841559b4b13915d46e65bf678bf20
+  metadata.gz: e7cbfd3ce2cd5175a8355431b89597b9111a55382f38258db4da5f10d5b41665f89f88cf75693e04296976ba2948a937421ef90668ddb03054f1455ccb94d4bf
+  data.tar.gz: b947a5af3ffde319e3e1391218bbcc020c354ba461e46261a4e972d05fae3957b8e843c62065641198ab94ee5eedf732078c093bfc70d38daedbffa5eb51f2f1

data/Gemfile

@@ -1,4 +1,11 @@
+# frozen_string_literal: true
+
 source "https://rubygems.org"
 
-# Specify your gem's dependencies in private_address_check.gemspec
 gemspec
+
+gem "minitest", "~> 6.0"
+gem "rake", "~> 13.0"
+gem "rubocop", "~> 1.12"
+gem "rubocop-minitest", "~> 0.39.1"
+gem "rubocop-rake", "~> 0.7.1"

data/README.md

@@ -1,13 +1,13 @@
 # PrivateAddressCheck
 
-[![Build Status](https://travis-ci.org/jtdowney/private_address_check.svg?branch=master)](https://travis-ci.org/jtdowney/private_address_check)
+[![CI](https://github.com/jtdowney/private_address_check/actions/workflows/ci.yml/badge.svg)](https://github.com/jtdowney/private_address_check/actions/workflows/ci.yml)
 [![Code Climate](https://codeclimate.com/github/jtdowney/private_address_check/badges/gpa.svg)](https://codeclimate.com/github/jtdowney/private_address_check)
 
 Checks if a URL or hostname would cause a request to a private network (RFC 1918). This is useful in preventing attacks like [Server Side Request Forgery](https://cwe.mitre.org/data/definitions/918.html).
 
 ## Requirements
 
-* Ruby >= 2.0
+- Ruby >= 2.7
 
 ## Installation
 

data/Rakefile

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 require "bundler/gem_tasks"
 require "rake/testtask"
 

data/lib/private_address_check/tcpsocket_ext.rb

@@ -14,8 +14,8 @@ end
 TCPSocket.class_eval do
   alias_method :initialize_without_private_address_check, :initialize
 
-  def initialize(*args)
-    initialize_without_private_address_check(*args)
+  def initialize(...)
+    initialize_without_private_address_check(...)
     if Thread.current[:private_address_check] && PrivateAddressCheck.resolves_to_private_address?(remote_address.ip_address)
       raise PrivateAddressCheck::PrivateConnectionAttemptedError
     end

data/lib/private_address_check/version.rb

@@ -1,3 +1,3 @@
 module PrivateAddressCheck
-  VERSION = "0.5.0".freeze
+  VERSION = "0.6.0".freeze
 end

data/test/private_address_check/tcpsocket_ext_test.rb

@@ -31,4 +31,18 @@ class TCPSocketExtTest < Minitest::Test
       end
     end
   end
+
+  # Ruby 4 added an open_timeout kwarg to TCPSocket.new/open.
+  # This is the same check used in https://github.com/ruby/net-http/blob/d7103a1b2c48addb22f87e8ad6713fa4e4f931c4/lib/net/http.rb#L1783
+  if Socket.method(:tcp).parameters.include?([:key, :open_timeout])
+    def test_public_address_with_timeout
+      connected = false
+      PrivateAddressCheck.only_public_connections do
+        TCPSocket.new("example.com", 80, open_timeout: 30)
+        connected = true
+      end
+
+      assert connected
+    end
+  end
 end

metadata

@@ -1,71 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: private_address_check
 version: !ruby/object:Gem::Version
-  version: 0.5.0
+  version: 0.6.0
 platform: ruby
 authors:
 - John Downey
-autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-05-29 00:00:00.000000000 Z
-dependencies:
-- !ruby/object:Gem::Dependency
-  name: bundler
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.12'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.12'
-- !ruby/object:Gem::Dependency
-  name: rake
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '10.0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '10.0'
-- !ruby/object:Gem::Dependency
-  name: minitest
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '5.0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '5.0'
-- !ruby/object:Gem::Dependency
-  name: rubocop
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 0.50.0
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 0.50.0
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies: []
 description: Checks if a IP or hostname would cause a request to a private network
   (RFC 1918)
 email:
@@ -89,7 +32,6 @@ homepage: https://github.com/jtdowney/private_address_check
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -97,16 +39,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.0.0
+      version: 3.2.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.7.6
-signing_key: 
+rubygems_version: 4.0.3
 specification_version: 4
 summary: Prevent Server Side Request Forgery attacks by checking the destination
 test_files: []