ruby-proxy-headers 0.2.0 → 0.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3a39a089e5181641efdaa2920edfd958bc127311e54be9942fdf5ae563ded24a
-  data.tar.gz: 0c138a06ea8d8b6dad7ed943b40e67964d05b0daf680e68ac1825a565647596a
+  metadata.gz: 30f82103fa860333b7df81d1b90271b048a8dd4e334bcb74caf5c762c2c7d695
+  data.tar.gz: 296932a159549772f64c66a305a794800f54a70f08b08f2e6e31cf5270d84c63
 SHA512:
-  metadata.gz: 5efd2419ca3cc85309f54823e5a98b59b465cbf98bc32b39503aa9ff11b14732fef71cc6bd5bdb413083b1addeb269bb22b4bdc5093cac29083419823173a234
-  data.tar.gz: 4fbaf515b270d7544a70bbfab697fe5594820161733290761367f6daee2d225484f3baaea9283420a1230a088a5dd981d7ca9d6a2c7a44f2c5a07e585cb66aa8
+  metadata.gz: 92f5f07379e76973c41159aadf9ff343dad72fd7df8ab14a6c090805b7af2c2f52af6ac048916de4a2f65f8e70efc4f11831d721ed16987b9859a14affc069bf
+  data.tar.gz: 87c47f3acd8ed3d0741b3075999f632e6998f59cdfb86606de02227fdf3fc9a72c78355964e048c29e8dae02d340d19f18b3b77ea3a131b92ad123e345a41329

data/.yardopts

@@ -0,0 +1,8 @@
+--readme README.md
+--title ruby-proxy-headers
+--charset utf-8
+--markup markdown
+--no-private
+lib/**/*.rb
+-
+LICENSE

data/README.md

@@ -1,3 +1,4 @@
+[![Gem Version](https://badge.fury.io/rb/ruby-proxy-headers.svg)](https://badge.fury.io/rb/ruby-proxy-headers)
 # Ruby Proxy Headers
 
 Send and receive custom proxy headers during HTTPS `CONNECT` tunneling in modern Ruby HTTP workflows (for example [ProxyMesh](https://proxymesh.com) `X-ProxyMesh-IP` / `X-ProxyMesh-Country`).

data/lib/ruby_proxy_headers/connection.rb

@@ -31,6 +31,8 @@ module RubyProxyHeaders
     # @param target_port [Integer] Target port (default: 443)
     # @return [OpenSSL::SSL::SSLSocket] TLS-wrapped socket to target
     def connect(target_host, target_port = 443)
+      validate_connect_target!(target_host, target_port)
+
       # Connect to proxy
       @socket = TCPSocket.new(@proxy[:host], @proxy[:port])
       @socket.setsockopt(Socket::IPPROTO_TCP, Socket::TCP_NODELAY, 1)
@@ -74,6 +76,7 @@ module RubyProxyHeaders
 
       # Add custom proxy headers
       @proxy_headers.each do |name, value|
+        RubyProxyHeaders.validate_header!(name, value)
         request_lines << "#{name}: #{value}"
       end
 
@@ -131,6 +134,17 @@ module RubyProxyHeaders
       @socket = ssl_socket
     end
 
+    def validate_connect_target!(host, port)
+      if RubyProxyHeaders::INVALID_HEADER_VALUE_RE.match?(host.to_s)
+        raise ArgumentError,
+              "CONNECT target host contains invalid characters (CR, LF, or NUL): #{host.inspect}"
+      end
+      if RubyProxyHeaders::INVALID_HEADER_VALUE_RE.match?(port.to_s)
+        raise ArgumentError,
+              "CONNECT target port contains invalid characters (CR, LF, or NUL): #{port.inspect}"
+      end
+    end
+
     def raise_connect_error
       case @proxy_response_status
       when 407

data/lib/ruby_proxy_headers/net_http.rb

@@ -82,6 +82,7 @@ module RubyProxyHeaders
             end
             if proxy_connect_request_headers&.any?
               proxy_connect_request_headers.each do |k, v|
+                RubyProxyHeaders.validate_header!(k, v)
                 buf << "#{k}: #{v}\r\n"
               end
             end

data/lib/ruby_proxy_headers/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module RubyProxyHeaders
-  VERSION = '0.2.0'
+  VERSION = '0.2.2'
 end

data/lib/ruby_proxy_headers.rb

@@ -4,8 +4,22 @@ require_relative 'ruby_proxy_headers/version'
 require_relative 'ruby_proxy_headers/net_http'
 
 module RubyProxyHeaders
+  INVALID_HEADER_NAME_RE = /[\r\n\0]/
+  INVALID_HEADER_VALUE_RE = /[\r\n\0]/
+
   # CONNECT response headers from the last Net::HTTP-based proxied HTTPS request on this thread.
   def self.proxy_connect_response_headers
     Thread.current[:ruby_proxy_headers_connect_headers]
   end
+
+  # Raises ArgumentError if +name+ or +value+ contain CR, LF, or NUL bytes
+  # that would allow HTTP header injection in a raw CONNECT request.
+  def self.validate_header!(name, value)
+    if INVALID_HEADER_NAME_RE.match?(name.to_s)
+      raise ArgumentError, "proxy CONNECT header name contains invalid characters (CR, LF, or NUL): #{name.inspect}"
+    end
+    if INVALID_HEADER_VALUE_RE.match?(value.to_s)
+      raise ArgumentError, "proxy CONNECT header value contains invalid characters (CR, LF, or NUL): #{value.inspect}"
+    end
+  end
 end

metadata

@@ -1,29 +1,84 @@
 --- !ruby/object:Gem::Specification
 name: ruby-proxy-headers
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.2
 platform: ruby
 authors:
 - ProxyMesh
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-04-04 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '2.4'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '2.4'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.12'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.12'
+- !ruby/object:Gem::Dependency
+  name: rubocop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.50'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.50'
+- !ruby/object:Gem::Dependency
+  name: yard
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.9'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.9'
 - !ruby/object:Gem::Dependency
   name: excon
   requirement: !ruby/object:Gem::Requirement
@@ -108,6 +163,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.6'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.18'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.18'
 description: |
   Extensions for Ruby HTTP stacks to send custom headers on HTTPS CONNECT to a proxy
   and read headers from the proxy CONNECT response (e.g. X-ProxyMesh-IP).
@@ -116,6 +185,7 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".yardopts"
 - DEFERRED.md
 - IMPLEMENTATION_PRIORITY.md
 - LIBRARY_RESEARCH.md
@@ -136,7 +206,7 @@ licenses:
 - MIT
 metadata:
   source_code_uri: https://github.com/proxymesh/ruby-proxy-headers
-post_install_message:
+  documentation_uri: https://rubydoc.info/gems/ruby-proxy-headers
 rdoc_options: []
 require_paths:
 - lib
@@ -151,8 +221,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.20
-signing_key:
+rubygems_version: 4.0.16
 specification_version: 4
 summary: Custom proxy CONNECT headers for Ruby HTTP clients (ProxyMesh, etc.)
 test_files: []