secret_string 1.1.0 → 1.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5f912f9e56675854f647fb6a965c6e3cfac83e999827249cdac00bbe096c3fc8
-  data.tar.gz: dc352220e6220adc7555be9064855990f6171938621634db7eca177bf6ede15f
+  metadata.gz: 4e77a20a0c153f8012adddf70b9103da583df65d61c0ac7783c3d8ac3d662605
+  data.tar.gz: 7e644205ca247b7c9eed5b17cde7123f507bf8f4833274496eb20ca64499f8dc
 SHA512:
-  metadata.gz: 18344af3842f3a6e1198bb29b85165ac8dd72a5b9de990a6c4d690882792b63b8cd29c2440293bbdefc7b3b1980334b0fba3da053f302d708ee1348451a9d4f7
-  data.tar.gz: 20a5236e50e545c04df1e8de38187c92386dde543b76888681d3209fe9a05e46aa2dc38faa24b806523c034e899e250ecac9a7f351c91339f693001393b69f5c
+  metadata.gz: c46c73bec6d745a64ddabe0c53779ccb31b6e8d4d6b30ae2d0b69104d8a45ba0d08e8853234cc371fcfa237e38b2ecbb354edad58c7b7360ecf9b06d1f809b07
+  data.tar.gz: 293481686e52118664d4231ee351416c0dbe083191d87059aab55f8ba87ae9056dfbe2706e218fe2123a1945eabd3c956ad1d4bb6d4ebf3808521e11a19b991d

data/CHANGELOG.md

@@ -1,3 +1,15 @@
+# [v1.1.2](https://github.com/Muriel-Salvan/secret_string/compare/v1.1.1...v1.1.2) (2022-12-31 11:23:01)
+
+### Patches
+
+* [Update to Ruby 3.1 - Support of 2.7 dropped](https://github.com/Muriel-Salvan/secret_string/commit/a339478b3ab6e4477971d9a7b583595586dfcce8)
+
+# [v1.1.1](https://github.com/Muriel-Salvan/secret_string/compare/v1.1.0...v1.1.1) (2021-08-13 09:59:55)
+
+### Patches
+
+* [[Fix] [#2] Handle frozen strings with correct exception messages before using them](https://github.com/Muriel-Salvan/secret_string/commit/b3e21e57613a6d39feca2118d272264cb77bdb5f)
+
 # [v1.1.0](https://github.com/Muriel-Salvan/secret_string/compare/v1.0.1...v1.1.0) (2021-07-07 10:21:42)
 
 ### Features

data/lib/secret_string/version.rb

@@ -1,5 +1,5 @@
 class SecretString
 
-  VERSION = '1.1.0'
+  VERSION = '1.1.2'
 
 end

data/lib/secret_string.rb

@@ -12,6 +12,8 @@ class SecretString
     # Parameters::
     # * *secret* (String): The secret to erase from memory
     def erase(secret)
+      raise 'Can\'t erase a frozen string' if secret.frozen?
+
       secret_size = secret.bytesize
       io = StringIO.new("\0" * secret_size)
       io.read(secret_size, secret)
@@ -21,16 +23,20 @@ class SecretString
     # Make sure the String will be erased at the end of its access.
     #
     # Parameters::
-    # * *str* (String): String to protect
+    # * *str* (String): String to protect, unfrozen
     # * *silenced_str* (String): The protected representation of this string [default: 'XXXXX']
     # * Proc: Code called with the string secured
     #   * Parameters::
     #     * *secretstring* (SecretString): The secret string
     def protect(str, silenced_str: 'XXXXX')
-      secret_string = SecretString.new(str, silenced_str: silenced_str)
-      yield secret_string
-    ensure
-      secret_string.erase
+      raise 'Can\'t protect a frozen string' if str.frozen?
+
+      begin
+        secret_string = SecretString.new(str, silenced_str:)
+        yield secret_string
+      ensure
+        secret_string.erase
+      end
     end
 
   end
@@ -38,9 +44,11 @@ class SecretString
   # Constructor
   #
   # Parameters::
-  # * *str* (String): The original string to protect
+  # * *str* (String): The original string to protect, unfrozen
   # * *silenced_str* (String): The silenced representation of this string [default: 'XXXXX']
   def initialize(str, silenced_str: 'XXXXX')
+    raise 'Can\'t silence a frozen string' if str.frozen?
+
     @str = str
     # Make sure we manipulate @str without cloning or modifying it from now on.
     @silenced_str = silenced_str

data/spec/secret_string_test/tests/secret_string_spec.rb

@@ -30,7 +30,7 @@ describe SecretString do
     end
 
     it 'matches correctly using the =~ operator with a string having the same content' do
-      expect(secret =~ /Secret/).not_to be nil
+      expect(secret =~ /Secret/).not_to be_nil
     end
 
     it 'reports the correct size' do
@@ -39,6 +39,14 @@ describe SecretString do
 
   end
 
+  context 'with a silenced frozen string' do
+
+    it 'fails to initialize a secret string frozen' do
+      expect { described_class.new('MySecret'.freeze, silenced_str: 'SilencedString') }.to raise_error 'Can\'t silence a frozen string'
+    end
+
+  end
+
   describe 'erase' do
 
     it 'erases a String' do
@@ -47,6 +55,11 @@ describe SecretString do
       expect(str).not_to eq 'MySecret'
     end
 
+    it 'fails to erase a frozen String' do
+      str = 'MySecret'.freeze
+      expect { described_class.erase(str) }.to raise_error 'Can\'t erase a frozen string'
+    end
+
   end
 
   describe 'protect' do
@@ -61,6 +74,17 @@ describe SecretString do
       expect(str.to_s).not_to eq 'MySecret'
     end
 
+    it 'fails to protect a frozen String' do
+      str = 'MySecret'.freeze
+      called = false
+      expect do
+        described_class.protect(str, silenced_str: 'SilencedString') do
+          called = true
+        end
+      end.to raise_error 'Can\'t protect a frozen string'
+      expect(called).to be false
+    end
+
   end
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: secret_string
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 1.1.2
 platform: ruby
 authors:
 - Muriel Salvan
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-07-07 00:00:00.000000000 Z
+date: 2022-12-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec
@@ -16,65 +16,65 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.8'
+        version: '3.12'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.8'
+        version: '3.12'
 - !ruby/object:Gem::Dependency
   name: sem_ver_components
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.0'
+        version: '0.3'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.0'
+        version: '0.3'
 - !ruby/object:Gem::Dependency
   name: rubocop
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.16'
+        version: '1.41'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.16'
+        version: '1.41'
 - !ruby/object:Gem::Dependency
   name: rubocop-rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.4'
+        version: '2.16'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.4'
+        version: '2.16'
 description: Remove secrets (passwords, keys...) from memory
 email:
 - muriel@x-aeon.com
 executables: []
 extensions: []
 extra_rdoc_files:
-- README.md
-- LICENSE.md
 - CHANGELOG.md
+- LICENSE.md
+- README.md
 files:
 - CHANGELOG.md
 - LICENSE.md
@@ -90,7 +90,8 @@ files:
 homepage: 
 licenses:
 - BSD-3-Clause
-metadata: {}
+metadata:
+  rubygems_mfa_required: 'true'
 post_install_message: 
 rdoc_options: []
 require_paths:
@@ -99,14 +100,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - "~>"
     - !ruby/object:Gem::Version
-      version: '2.7'
+      version: '3.1'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.6
+rubygems_version: 3.3.26
 signing_key: 
 specification_version: 4
 summary: Secret String