recurly 2.15.2 → 2.15.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 435421667969ab85e80f5d636ff056462380a42feed0f6db5d7ded82965c7e28
-  data.tar.gz: 8f070aec99e9dbba6e5ece4eaa42c94d885d048f71e05d42df807dd97c494978
+  metadata.gz: 9d73e8a6a9ed11996aab5b9ade68b0c096129001cbd8e53ec413c54aa069b36c
+  data.tar.gz: c765f551409dd907115e324ae04387765c93bb814810a3ce4b0af421cbdd9241
 SHA512:
-  metadata.gz: 2963d34f5732bdd3331139485577ebb09fd7637e517637502e71419ae47f430fb9f1f8d9ab622e86b47711632f33a7163f23c126271111fcee895286e8f268f0
-  data.tar.gz: 79197deb0459cc55518a0f0995d047311c376471ebd82f3a04a42f0e888e912cff9c489bd1448f4ae5a82e8bebcfc7a58de32b2c33872571d25a03545755b94c
+  metadata.gz: fc7b7e064ecca26ed5c86ca08bab1d1b2e4ac7a8ee569404d41ef848bbc3e96f6c5cad9dd4cc4190144945c1a9073815cb385032a0e39ec0a0f3008ec8dfa5d2
+  data.tar.gz: 40060514d41cdb8212132d72db405313d6eb7333913dbcc3717d120c55a13fb6df72f7743ec5d3e6389c0e7996db103cb2dd1c47aac7698689e7c6c86ac71ae9

data/lib/recurly.rb

@@ -89,6 +89,8 @@ module Recurly
     end
 
     # Assigns a logger to log requests/responses and more.
+    # The logger can only be set if the environment variable
+    # `RECURLY_INSECURE_DEBUG` equals `true`.
     #
     # @return [Logger, nil]
     # @example
@@ -100,6 +102,22 @@ module Recurly
     #   Recurly.logger = nil # Or Recurly.logger = Logger.new nil
     attr_accessor :logger
 
+    def logger=(logger)
+      if ENV['RECURLY_INSECURE_DEBUG'].to_s.downcase == 'true'
+        @logger = logger
+        puts <<-MSG
+        [WARNING] Recurly logger enabled. The logger has the potential to leak
+        PII and should never be used in production environments.
+        MSG
+      else
+        puts <<-MSG
+        [WARNING] Recurly logger has been disabled. If you wish to use it,
+        only do so in a non-production environment and make sure
+        the `RECURLY_INSECURE_DEBUG` environment variable is set to `true`.
+        MSG
+      end
+    end
+
     # Convenience logging method includes a Logger#progname dynamically.
     # @return [true, nil]
     def log level, message

data/lib/recurly/version.rb

@@ -2,7 +2,7 @@ module Recurly
   module Version
     MAJOR   = 2
     MINOR   = 15
-    PATCH   = 2
+    PATCH   = 3
     PRE     = nil
 
     VERSION = [MAJOR, MINOR, PATCH, PRE].compact.join('.').freeze

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: recurly
 version: !ruby/object:Gem::Version
-  version: 2.15.2
+  version: 2.15.3
 platform: ruby
 authors:
 - Recurly
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-04-18 00:00:00.000000000 Z
+date: 2018-05-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: nokogiri