simplycop 1.12.12 → 1.12.13
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.simplycop.yml +103 -0
- data/lib/simplycop/custom_cops/dont_print_all_env.rb +4 -4
- data/lib/simplycop/security/reject_all_requests_local.rb +2 -2
- data/lib/simplycop/version.rb +1 -1
- data/simplycop.gemspec +1 -1
- metadata +4 -4
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 7bcd75c07282d6105cb8cb92d7bce94f45c15d39f267bf728cd865eb83db72b6
|
|
4
|
+
data.tar.gz: 989276d266d83938c63b3106b868ae155ddf62dd24d53ed6eefb46c0d48b7318
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: c61acf3adf95dd5264021d1ad8cb02f5eb413e2a61fd1bd038d27cec7fe1b2f649636a7915b055dea263feac315b8e0ddca8bf3bc990bd675d7366a48bfd4ac8
|
|
7
|
+
data.tar.gz: a7d64eea7f27910436e7efb3687d4bbac219ab6fd5dd519402d3ad11f90834f568720a194084b4c1b3c28ad019b43da5a84c9304afe9ba2468f4378efdccc0d7
|
data/.simplycop.yml
CHANGED
|
@@ -36,6 +36,15 @@ Layout/FirstHashElementLineBreak:
|
|
|
36
36
|
Layout/HeredocArgumentClosingParenthesis:
|
|
37
37
|
Enabled: true
|
|
38
38
|
|
|
39
|
+
Layout/LineContinuationLeadingSpace:
|
|
40
|
+
Enabled: true
|
|
41
|
+
|
|
42
|
+
Layout/LineContinuationSpacing:
|
|
43
|
+
Enabled: true
|
|
44
|
+
|
|
45
|
+
Layout/LineEndStringConcatenationIndentation:
|
|
46
|
+
Enabled: true
|
|
47
|
+
|
|
39
48
|
Layout/SpaceBeforeBrackets:
|
|
40
49
|
Enabled: true
|
|
41
50
|
|
|
@@ -46,12 +55,24 @@ Lint/AmbiguousBlockAssociation:
|
|
|
46
55
|
Exclude:
|
|
47
56
|
- spec/**/*
|
|
48
57
|
|
|
58
|
+
Lint/AmbiguousOperatorPrecedence:
|
|
59
|
+
Enabled: true
|
|
60
|
+
|
|
61
|
+
Lint/AmbiguousRange:
|
|
62
|
+
Enabled: true
|
|
63
|
+
|
|
49
64
|
Lint/DeprecatedConstants:
|
|
50
65
|
Enabled: true
|
|
51
66
|
|
|
52
67
|
Lint/DuplicateBranch:
|
|
53
68
|
Enabled: true
|
|
54
69
|
|
|
70
|
+
Lint/DuplicateMagicComment:
|
|
71
|
+
Enabled: true
|
|
72
|
+
|
|
73
|
+
Lint/DuplicateMethods:
|
|
74
|
+
Enabled: true
|
|
75
|
+
|
|
55
76
|
Lint/DuplicateRegexpCharacterClassElement:
|
|
56
77
|
Enabled: true
|
|
57
78
|
|
|
@@ -70,6 +91,9 @@ Lint/LambdaWithoutLiteralBlock:
|
|
|
70
91
|
Lint/NoReturnInBeginEndBlocks:
|
|
71
92
|
Enabled: true
|
|
72
93
|
|
|
94
|
+
Lint/NonAtomicFileOperation:
|
|
95
|
+
Enabled: true
|
|
96
|
+
|
|
73
97
|
Lint/NumberedParameterAssignment:
|
|
74
98
|
Enabled: true
|
|
75
99
|
|
|
@@ -79,6 +103,15 @@ Lint/OrAssignmentToConstant:
|
|
|
79
103
|
Lint/RedundantDirGlobSort:
|
|
80
104
|
Enabled: true
|
|
81
105
|
|
|
106
|
+
Lint/RefinementImportMethods:
|
|
107
|
+
Enabled: true
|
|
108
|
+
|
|
109
|
+
Lint/RequireRangeParentheses:
|
|
110
|
+
Enabled: true
|
|
111
|
+
|
|
112
|
+
Lint/RequireRelativeSelfPath:
|
|
113
|
+
Enabled: true
|
|
114
|
+
|
|
82
115
|
Lint/SymbolConversion:
|
|
83
116
|
Enabled: true
|
|
84
117
|
|
|
@@ -94,6 +127,9 @@ Lint/UnexpectedBlockArity:
|
|
|
94
127
|
Lint/UnmodifiedReduceAccumulator:
|
|
95
128
|
Enabled: true
|
|
96
129
|
|
|
130
|
+
Lint/UselessRuby2Keywords:
|
|
131
|
+
Enabled: true
|
|
132
|
+
|
|
97
133
|
Metrics/BlockLength:
|
|
98
134
|
Exclude:
|
|
99
135
|
- spec/**/*.rb
|
|
@@ -101,8 +137,24 @@ Metrics/BlockLength:
|
|
|
101
137
|
Metrics/ClassLength:
|
|
102
138
|
Max: 512
|
|
103
139
|
|
|
140
|
+
Metrics/ParameterLists:
|
|
141
|
+
CountKeywordArgs: false
|
|
142
|
+
Enabled: true
|
|
143
|
+
|
|
144
|
+
Naming/InclusiveLanguage:
|
|
145
|
+
Enabled: true
|
|
146
|
+
|
|
104
147
|
###### COPS REVIEWED ABOVE THIS LINE ######
|
|
105
148
|
|
|
149
|
+
Security/CompoundHash:
|
|
150
|
+
Enabled: true
|
|
151
|
+
|
|
152
|
+
Security/IoMethods:
|
|
153
|
+
Enabled: true
|
|
154
|
+
|
|
155
|
+
Style/AccessModifierDeclarations:
|
|
156
|
+
Enabled: false
|
|
157
|
+
|
|
106
158
|
Style/AccessorGrouping:
|
|
107
159
|
Enabled: true
|
|
108
160
|
|
|
@@ -115,6 +167,9 @@ Style/ArgumentsForwarding:
|
|
|
115
167
|
Style/ArrayCoercion:
|
|
116
168
|
Enabled: true
|
|
117
169
|
|
|
170
|
+
Style/ArrayIntersect:
|
|
171
|
+
Enabled: true
|
|
172
|
+
|
|
118
173
|
Style/BisectedAttrAccessor:
|
|
119
174
|
Enabled: true
|
|
120
175
|
|
|
@@ -131,6 +186,9 @@ Style/ColonMethodCall:
|
|
|
131
186
|
Style/CombinableLoops:
|
|
132
187
|
Enabled: true
|
|
133
188
|
|
|
189
|
+
Style/ConcatArrayLiterals:
|
|
190
|
+
Enabled: true
|
|
191
|
+
|
|
134
192
|
Style/ConditionalAssignment:
|
|
135
193
|
Enabled: true
|
|
136
194
|
|
|
@@ -143,12 +201,21 @@ Style/Documentation:
|
|
|
143
201
|
Style/EndlessMethod:
|
|
144
202
|
Enabled: true
|
|
145
203
|
|
|
204
|
+
Style/EnvHome:
|
|
205
|
+
Enabled: true
|
|
206
|
+
|
|
146
207
|
Style/ExplicitBlockArgument:
|
|
147
208
|
Enabled: true
|
|
148
209
|
|
|
149
210
|
Style/ExponentialNotation:
|
|
150
211
|
Enabled: false
|
|
151
212
|
|
|
213
|
+
Style/FetchEnvVar:
|
|
214
|
+
Enabled: true
|
|
215
|
+
|
|
216
|
+
Style/FileWrite:
|
|
217
|
+
Enabled: true
|
|
218
|
+
|
|
152
219
|
Style/For:
|
|
153
220
|
Enabled: true
|
|
154
221
|
|
|
@@ -191,6 +258,9 @@ Style/HashTransformValues:
|
|
|
191
258
|
Style/IfInsideElse:
|
|
192
259
|
Enabled: true
|
|
193
260
|
|
|
261
|
+
Style/IfUnlessModifier:
|
|
262
|
+
Enabled: false
|
|
263
|
+
|
|
194
264
|
Style/IfWithBooleanLiteralBranches:
|
|
195
265
|
Enabled: true
|
|
196
266
|
|
|
@@ -200,6 +270,9 @@ Style/KeywordParametersOrder:
|
|
|
200
270
|
Style/LambdaCall:
|
|
201
271
|
Enabled: true
|
|
202
272
|
|
|
273
|
+
Style/MapToHash:
|
|
274
|
+
Enabled: true
|
|
275
|
+
|
|
203
276
|
Style/MethodDefParentheses:
|
|
204
277
|
Enabled: true
|
|
205
278
|
|
|
@@ -227,6 +300,12 @@ Style/NilLambda:
|
|
|
227
300
|
Style/NumericPredicate:
|
|
228
301
|
Enabled: false
|
|
229
302
|
|
|
303
|
+
Style/OpenStructUse:
|
|
304
|
+
Enabled: true
|
|
305
|
+
|
|
306
|
+
Style/OperatorMethodCall:
|
|
307
|
+
Enabled: true
|
|
308
|
+
|
|
230
309
|
Style/OptionalArguments:
|
|
231
310
|
Enabled: true
|
|
232
311
|
|
|
@@ -236,6 +315,9 @@ Style/OptionalBooleanParameter:
|
|
|
236
315
|
Style/ParenthesesAroundCondition:
|
|
237
316
|
Enabled: true
|
|
238
317
|
|
|
318
|
+
Style/QuotedSymbols:
|
|
319
|
+
Enabled: true
|
|
320
|
+
|
|
239
321
|
Style/RedundantArgument:
|
|
240
322
|
Enabled: false
|
|
241
323
|
|
|
@@ -248,6 +330,12 @@ Style/RedundantBegin:
|
|
|
248
330
|
Style/RedundantConstantBase:
|
|
249
331
|
Enabled: false
|
|
250
332
|
|
|
333
|
+
Style/RedundantDoubleSplatHashBraces:
|
|
334
|
+
Enabled: true
|
|
335
|
+
|
|
336
|
+
Style/RedundantEach:
|
|
337
|
+
Enabled: true
|
|
338
|
+
|
|
251
339
|
Style/RedundantException:
|
|
252
340
|
Enabled: true
|
|
253
341
|
|
|
@@ -257,6 +345,9 @@ Style/RedundantFetchBlock:
|
|
|
257
345
|
Style/RedundantFileExtensionInRequire:
|
|
258
346
|
Enabled: true
|
|
259
347
|
|
|
348
|
+
Style/RedundantInitialize:
|
|
349
|
+
Enabled: true
|
|
350
|
+
|
|
260
351
|
Style/RedundantInterpolation:
|
|
261
352
|
Enabled: false
|
|
262
353
|
|
|
@@ -276,6 +367,18 @@ Style/RedundantReturn:
|
|
|
276
367
|
Style/RedundantSelfAssignment:
|
|
277
368
|
Enabled: true
|
|
278
369
|
|
|
370
|
+
Style/RedundantSelfAssignmentBranch:
|
|
371
|
+
Enabled: true
|
|
372
|
+
|
|
373
|
+
Style/RedundantStringEscape:
|
|
374
|
+
Enabled: true
|
|
375
|
+
|
|
376
|
+
Style/SafeNavigation:
|
|
377
|
+
Enabled: false
|
|
378
|
+
|
|
379
|
+
Style/SelectByRegexp:
|
|
380
|
+
Enabled: true
|
|
381
|
+
|
|
279
382
|
Style/SelfAssignment:
|
|
280
383
|
Enabled: true
|
|
281
384
|
|
|
@@ -14,10 +14,10 @@ module CustomCops
|
|
|
14
14
|
# # good
|
|
15
15
|
# puts ENV['SOME_KEY']
|
|
16
16
|
# puts ENVIRON['SOME_KEY']
|
|
17
|
-
MSG = 'Printing all Environment Variables is extremely risky'\
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
17
|
+
MSG = 'Printing all Environment Variables is extremely risky ' \
|
|
18
|
+
'If this code has been run, then it is likely that secrets have been ' \
|
|
19
|
+
'exposed in plaintext. Please alert `#infosec` about this so it can be ' \
|
|
20
|
+
'investigated immediately.' \
|
|
21
21
|
|
|
22
22
|
def_node_matcher :convert_env_to_hash_or_array?, <<~PATTERN
|
|
23
23
|
(send (const nil? {:ENVIRON :ENV}) {:to_h :to_a :to_hash})
|
|
@@ -9,10 +9,10 @@ module Security
|
|
|
9
9
|
source = node.source
|
|
10
10
|
file_name = node.loc.operator.to_s
|
|
11
11
|
|
|
12
|
-
add_offense(node, location: :selector) if found_match(source) &&
|
|
12
|
+
add_offense(node, location: :selector) if found_match(source) && block_listed?(file_name)
|
|
13
13
|
end
|
|
14
14
|
|
|
15
|
-
def
|
|
15
|
+
def block_listed?(string)
|
|
16
16
|
RAILS_ENV.each_with_object([]) do |env, results|
|
|
17
17
|
results << string.include?(env)
|
|
18
18
|
end.any?(true)
|
data/lib/simplycop/version.rb
CHANGED
data/simplycop.gemspec
CHANGED
|
@@ -17,7 +17,7 @@ Gem::Specification.new do |spec|
|
|
|
17
17
|
spec.files = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
|
|
18
18
|
spec.require_paths = ['lib']
|
|
19
19
|
|
|
20
|
-
spec.add_dependency 'rubocop', '~> 1.
|
|
20
|
+
spec.add_dependency 'rubocop', '~> 1.42'
|
|
21
21
|
spec.add_dependency 'rubocop-rails', '~> 2.15'
|
|
22
22
|
spec.add_dependency 'rubocop-rspec', '~> 2.12'
|
|
23
23
|
spec.add_development_dependency 'bundler', '>= 2.2.15'
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: simplycop
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.12.
|
|
4
|
+
version: 1.12.13
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Simply Business
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2023-
|
|
11
|
+
date: 2023-04-20 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: rubocop
|
|
@@ -16,14 +16,14 @@ dependencies:
|
|
|
16
16
|
requirements:
|
|
17
17
|
- - "~>"
|
|
18
18
|
- !ruby/object:Gem::Version
|
|
19
|
-
version: '1.
|
|
19
|
+
version: '1.42'
|
|
20
20
|
type: :runtime
|
|
21
21
|
prerelease: false
|
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
|
23
23
|
requirements:
|
|
24
24
|
- - "~>"
|
|
25
25
|
- !ruby/object:Gem::Version
|
|
26
|
-
version: '1.
|
|
26
|
+
version: '1.42'
|
|
27
27
|
- !ruby/object:Gem::Dependency
|
|
28
28
|
name: rubocop-rails
|
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|