rack-shield 1.1.1 → 1.1.2

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: fea3d5844980d07e59e42929d6d0679bd4cd636fb5eb9444d02d4a3729710bf1
4
- data.tar.gz: ea7b2700a32bcdd687aed84b4cf815302bff6f4570b9aed2b9a84a42bf7698e3
3
+ metadata.gz: c750d4385a2c39170a389f8b5a2aca1e4b967abb97cbdcd2fb142fd470d8df8c
4
+ data.tar.gz: ea2b3f0519e5e38f742e1aa093366451082852ae6b57e29209d5c327c1298a84
5
5
  SHA512:
6
- metadata.gz: e76a82a335a7eaddd9d0cb5f9724f1c0bd722a2f11cf6b3d08f382d16c2cf704753455e9ffb0d9bd199bc6963ba28d59dda2c7878b608a7171e97349c647498c
7
- data.tar.gz: 1f72b350d9c692f8f8f3909d15321848ee21d6f57ddfcc65e2314df8a12f0cf96d1d0b139a3dcada02a5b1f6847c380743f5ef8e7cfa5fae98c4e9c62b8c5f69
6
+ metadata.gz: 28d31dba76eda79a987bc8139ce7f1fa22cc0347ea5bd2dda52e79064e040bd0569e14c7c642d37421e25dd390410198ddb51ca2ce26d54e3e0842c828c9f2cb
7
+ data.tar.gz: 7b1d80c74cbbe6d07e2127f967fc7373dccc7f1258b9c4050311442b378ba9a47aedc7fafdf0342554c3d72d1353fd381d20277b93d17d99e640fc70d9d63daa
@@ -1,5 +1,5 @@
1
1
  module Rack
2
2
  module Shield
3
- VERSION = '1.1.1'
3
+ VERSION = '1.1.2'
4
4
  end
5
5
  end
data/lib/rack/shield.rb CHANGED
@@ -8,7 +8,7 @@ require_relative 'shield/request_ext'
8
8
  module Rack
9
9
  module Shield
10
10
  DEFAULT_PATHS = [/\/wp-(includes|content|admin|json|config)/,
11
- /\.(php|cgi|asp|aspx|shtml|log|(my)?sql(\.tar)?(\.t?(gz|zip))?|cfm|py|lasso|e?rb|pl|jsp|do|action|sh)\z/i,
11
+ /\.(php|cgi|asp|aspx|shtml|log|(my)?sql(\.tar)?(\.t?(gz|zip))?|cfm|py|lasso|e?rb|pl|jsp|do|action|sh|dll)\z/i,
12
12
  'cgi-bin',
13
13
  'phpmyadmin',
14
14
  '/pma/',
@@ -42,12 +42,18 @@ module Rack
42
42
  'deployment-config.json',
43
43
  'ftpsync.settings',
44
44
  '/_profiler/latest',
45
- '/_ignition/execute-solution',
45
+ '/_ignition/',
46
46
  '/_wpeprivate/',
47
47
  '/Config/SaveUploadedHotspotLogoFile',
48
48
  'ALFA_DATA',
49
49
  'cgialfa',
50
50
  'alfacgiapi',
51
+ '/+CSCOT+/',
52
+ '/api/v2/cmdb/system',
53
+ 'com.vmware.vsan.client.services',
54
+ '/aspnet-ajax/',
55
+ '/Portal.mwsl',
56
+ '/adminer',
51
57
  /\A\/"/,
52
58
  /\/\.(hg|git|svn|bzr|htaccess|ftpconfig|vscode|remote-sync|aws|env|DS_Store)/,
53
59
  /\/old\/?\z/,
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: rack-shield
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.1.1
4
+ version: 1.1.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - Matthias Grosser
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-08-19 00:00:00.000000000 Z
11
+ date: 2023-01-05 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: rack-attack