rails-hush 2.0.1 → 2.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b9c9a7040ec89a870ab1dfe8cc909b3f34ef32ef8449c09d85b122ef5b37e803
-  data.tar.gz: 29740fa9f1eb2f1e4bfbc3f6ccf1bb9174c2bf07098b67942949e1913b0f818c
+  metadata.gz: 5533ef601892c2d0fe8a172fa63d5e3cca4ef4e982b908d41534bfefffdda8c8
+  data.tar.gz: 8ae7d447cefb94b96f21a1153b3acdde15d252bc3c5b0a290b7cff18af093c09
 SHA512:
-  metadata.gz: 427f57e8bb14e09074dec074744c2bbd6c12fe216658c4edf4f9edfab8003d3132316d37e6ca1796dfee4d0e43127bece4b3c7e9a448ab2df476db56c4fe1951
-  data.tar.gz: 2deab703a635d8de86ada4b2962960d7c66be29bb77ed7a5f82adfe4a6d5ad0195fca42cbfea78df86638b918cea38b77cc2fb46dae2d7879855a54c955197de
+  metadata.gz: 7ab7318331a10f7b660f9859b95287ac96a9328513dec2f6dadfb370930329f06b2f8eca5bc928a54d2b9f46c7c65b05ecd5369a1de7a4b3bbc625e1b5f7574f
+  data.tar.gz: a47e1a48cfd947c0d9327cdf2de2ef37bd06c42d255a1963f8482e358a7a4f544ef67cd5acfdc285ca36bb87f6aaa7f1a270b8f23638c198cd5cb78e1bae352e

data/LICENSE.txt

@@ -1,4 +1,4 @@
-Copyright 2019-2025 thomas morgan
+Copyright 2019-2026 thomas morgan
 
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of this software and associated documentation files (the

data/lib/rails_hush/middleware/hush_one.rb

@@ -15,6 +15,8 @@ module RailsHush
           @app.call(env)
         rescue ActionController::UnknownHttpMethod
           render 405, request, 'Unrecognized HTTP method'
+        rescue Encoding::CompatibilityError
+          render 400, request, 'Invalid string or encoding'
         end
       else
         @app.call(env)

data/lib/rails_hush/middleware/hush_two.rb

@@ -23,10 +23,14 @@ module RailsHush
           if x.message =~ /(Invalid encoding for parameter|invalid %-encoding)/
             log_request 400, request
             render 400, request, 'Invalid string or encoding'
+          elsif x.message =~ /Rack::Multipart::EmptyContentError|bad content body/
+            log_request 400, request
+            render 400, request, 'Unable to parse request body'
           else
             raise x
           end
-        rescue ActionDispatch::Http::Parameters::ParseError
+        rescue ActionDispatch::Http::Parameters::ParseError,
+               Rack::Multipart::BoundaryTooLongError
           log_request 400, request
           render 400, request, 'Unable to parse request body'
         rescue ActionController::RoutingError => x
@@ -42,7 +46,7 @@ module RailsHush
           render 406, request, 'Invalid media type'
         rescue ActionController::ParameterMissing => x
           render 422, request, "Required parameter missing or empty: #{x.param}"
-        rescue ActionController::InvalidAuthenticityToken
+        rescue (Rails.version > '8.2' ? ActionController::InvalidCrossOriginRequest : ActionController::InvalidAuthenticityToken)
           render 422, request, 'Invalid CSRF token'
         end
       else

data/lib/rails_hush/middleware/simple_renderer.rb

@@ -16,7 +16,9 @@ module RailsHush
     def render(status, request, error=nil)
       begin
         content_type = request.formats.first
-      rescue Mime::Type::InvalidMimeType
+      rescue Mime::Type::InvalidMimeType,
+             Encoding::CompatibilityError,
+             Rack::Multipart::BoundaryTooLongError
         content_type = Mime[:text]
       end
       error ||= Rack::Utils::HTTP_STATUS_CODES.fetch(status, Rack::Utils::HTTP_STATUS_CODES[500])

data/lib/rails_hush/version.rb

@@ -1,3 +1,3 @@
 module RailsHush
-  VERSION = '2.0.1'
+  VERSION = '2.2.0'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rails-hush
 version: !ruby/object:Gem::Version
-  version: 2.0.1
+  version: 2.2.0
 platform: ruby
 authors:
 - thomas morgan
@@ -18,7 +18,7 @@ dependencies:
         version: '7'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '8.2'
+        version: '8.3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '7'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '8.2'
+        version: '8.3'
 - !ruby/object:Gem::Dependency
   name: sqlite3
   requirement: !ruby/object:Gem::Requirement