sqreen-alt 1.13.4 → 1.14.0.beta3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b7a897cefdb6a040f3833e14b4588c9f93a91e066b2e81f09c2e31b8ed93f06f
-  data.tar.gz: ce62d2759be30d1ff96e5c90d7a1e96d28ea38c7a9a88b9487b80aeb7106e07e
+  metadata.gz: 2c708d001228bf315406811cfee3b173a35d05da108713b45dc4bb29af9d7f15
+  data.tar.gz: dc2a4a9f4c2ae9d5d93d3694570b07ab5d18d5a3742ac6401fcb2c30ce3ccb10
 SHA512:
-  metadata.gz: 4c944e628dcfaaef7c6102cb8ce7bcf5455537e5a8fb0f3be435b59c531a173e4e4976acf028bccfafe9e9b51cf74bfc56d4b803063fd8cae12d1f74493528a5
-  data.tar.gz: 90f5b62eccafc3c19018333011cde0c9543cee3b92e92f57fec2749cada564d808e179c13d53fa75787b3344c603a679dfccb6e6020e55a403004967bb3e5db3
+  metadata.gz: 92a3706845d4bdda4081e77281aa8a9c48fc3198f36b82783640cab59d2256e5abec38ddaeca9b816843c9f48f38174b219b4747347810d91786787ba09f8882
+  data.tar.gz: e4036dbbce01e2f5bb3de9014dc4576d48e181a949a077eb6c0a82ffd71518f5caf42df72d4ca6e7fd4fc5756639ff282d6d8371077fca4284d94de14d678bc3

data/Rakefile

@@ -1,20 +1,2 @@
-# Copyright (c) 2015 Sqreen. All Rights Reserved.
-# Please refer to our terms for more information: https://www.sqreen.io/terms.html
-
-require 'bundler/gem_tasks'
-require 'rake/testtask'
-
-if RUBY_VERSION >= '1.9.3'
-  require 'ci/reporter/rake/minitest'
-  task :testunit => 'ci:setup:minitest'
-else
-  task :testunit => :test
-end
-
-Rake::TestTask.new do |t|
-  t.pattern = 'test/**/*.rb'
-  t.libs << 'test'
-end
-
-desc 'Run tests'
-task :default => :test
+require "bundler/gem_tasks"
+task :default => :spec

metadata

@@ -1,69 +1,57 @@
 --- !ruby/object:Gem::Specification
 name: sqreen-alt
 version: !ruby/object:Gem::Version
-  version: 1.13.4
+  version: 1.14.0.beta3
 platform: ruby
 authors:
 - Sqreen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-08-16 00:00:00.000000000 Z
+date: 2018-09-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: execjs
+  name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.3.0
-  type: :runtime
+        version: '1.16'
+  type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.3.0
+        version: '1.16'
 - !ruby/object:Gem::Dependency
-  name: mini_racer
+  name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 0.1.15
-    - - "<"
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.2'
-  type: :runtime
+        version: '10.0'
+  type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 0.1.15
-    - - "<"
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.2'
+        version: '10.0'
 - !ruby/object:Gem::Dependency
-  name: libv8
+  name: sqreen
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">"
+    - - '='
       - !ruby/object:Gem::Version
-        version: '6.3'
-    - - "<"
-      - !ruby/object:Gem::Version
-        version: '6.4'
+        version: 1.14.0.beta3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">"
-      - !ruby/object:Gem::Version
-        version: '6.3'
-    - - "<"
+    - - '='
       - !ruby/object:Gem::Version
-        version: '6.4'
+        version: 1.14.0.beta3
 description: Sqreen is a SaaS based Application protection and monitoring platform
   that integrates directly into your Ruby applications. Learn more at https://sqreen.io.
 email: contact@sqreen.io
@@ -71,93 +59,13 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- CODE_OF_CONDUCT.md
-- README.md
 - Rakefile
-- lib/sqreen-alt.rb
-- lib/sqreen.rb
-- lib/sqreen/actions.rb
-- lib/sqreen/attack_detected.html
-- lib/sqreen/binding_accessor.rb
-- lib/sqreen/ca.crt
-- lib/sqreen/call_countable.rb
-- lib/sqreen/callback_tree.rb
-- lib/sqreen/callbacks.rb
-- lib/sqreen/capped_queue.rb
-- lib/sqreen/condition_evaluator.rb
-- lib/sqreen/conditionable.rb
-- lib/sqreen/configuration.rb
-- lib/sqreen/context.rb
-- lib/sqreen/deliveries/batch.rb
-- lib/sqreen/deliveries/simple.rb
-- lib/sqreen/event.rb
-- lib/sqreen/events/attack.rb
-- lib/sqreen/events/remote_exception.rb
-- lib/sqreen/events/request_record.rb
-- lib/sqreen/exception.rb
-- lib/sqreen/frameworks.rb
-- lib/sqreen/frameworks/generic.rb
-- lib/sqreen/frameworks/rails.rb
-- lib/sqreen/frameworks/rails3.rb
-- lib/sqreen/frameworks/request_recorder.rb
-- lib/sqreen/frameworks/sinatra.rb
-- lib/sqreen/frameworks/sqreen_test.rb
-- lib/sqreen/instrumentation.rb
-- lib/sqreen/log.rb
-- lib/sqreen/metrics.rb
-- lib/sqreen/metrics/average.rb
-- lib/sqreen/metrics/base.rb
-- lib/sqreen/metrics/binning.rb
-- lib/sqreen/metrics/collect.rb
-- lib/sqreen/metrics/sum.rb
-- lib/sqreen/metrics_store.rb
-- lib/sqreen/middleware.rb
-- lib/sqreen/payload_creator.rb
-- lib/sqreen/performance_notifications.rb
-- lib/sqreen/performance_notifications/binned_metrics.rb
-- lib/sqreen/performance_notifications/log.rb
-- lib/sqreen/performance_notifications/log_performance.rb
-- lib/sqreen/performance_notifications/metrics.rb
-- lib/sqreen/performance_notifications/newrelic.rb
-- lib/sqreen/remote_command.rb
-- lib/sqreen/rule_attributes.rb
-- lib/sqreen/rule_callback.rb
-- lib/sqreen/rules.rb
-- lib/sqreen/rules_callbacks.rb
-- lib/sqreen/rules_callbacks/binding_accessor_matcher.rb
-- lib/sqreen/rules_callbacks/binding_accessor_metrics.rb
-- lib/sqreen/rules_callbacks/blacklist_ips.rb
-- lib/sqreen/rules_callbacks/count_http_codes.rb
-- lib/sqreen/rules_callbacks/crawler_user_agent_matches.rb
-- lib/sqreen/rules_callbacks/crawler_user_agent_matches_metrics.rb
-- lib/sqreen/rules_callbacks/custom_error.rb
-- lib/sqreen/rules_callbacks/execjs.rb
-- lib/sqreen/rules_callbacks/headers_insert.rb
-- lib/sqreen/rules_callbacks/inspect_rule.rb
-- lib/sqreen/rules_callbacks/matcher_rule.rb
-- lib/sqreen/rules_callbacks/rails_parameters.rb
-- lib/sqreen/rules_callbacks/record_request_context.rb
-- lib/sqreen/rules_callbacks/reflected_xss.rb
-- lib/sqreen/rules_callbacks/regexp_rule.rb
-- lib/sqreen/rules_callbacks/run_block_user_actions.rb
-- lib/sqreen/rules_callbacks/run_req_start_actions.rb
-- lib/sqreen/rules_callbacks/shell_env.rb
-- lib/sqreen/rules_callbacks/url_matches.rb
-- lib/sqreen/rules_callbacks/user_agent_matches.rb
-- lib/sqreen/rules_signature.rb
-- lib/sqreen/runner.rb
-- lib/sqreen/runtime_infos.rb
-- lib/sqreen/safe_json.rb
-- lib/sqreen/sdk.rb
-- lib/sqreen/serializer.rb
-- lib/sqreen/session.rb
-- lib/sqreen/shared_storage.rb
-- lib/sqreen/shared_storage23.rb
-- lib/sqreen/version.rb
 homepage: https://www.sqreen.io/
 licenses: []
 metadata: {}
-post_install_message: 
+post_install_message: |
+  'sqreen-alt' is deprecated and just points to the 'sqreen' gem now.
+  Replace it with the 'sqreen' gem.
 rdoc_options: []
 require_paths:
 - lib
@@ -168,12 +76,12 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.7.6
+rubygems_version: 2.7.7
 signing_key: 
 specification_version: 4
 summary: Sqreen Ruby agent

data/CODE_OF_CONDUCT.md

@@ -1,22 +0,0 @@
-# Contributor Code of Conduct
-
-As contributors and maintainers of this project, and in the interest of fostering an open and welcoming community, we pledge to respect all people who contribute through reporting issues, posting feature requests, updating documentation, submitting pull requests or patches, and other activities.
-
-We are committed to making participation in this project a harassment-free experience for everyone, regardless of level of experience, gender, gender identity and expression, sexual orientation, disability, personal appearance, body size, race, ethnicity, age, religion, or nationality.
-
-Examples of unacceptable behavior by participants include:
-
-* The use of sexualized language or imagery
-* Personal attacks
-* Trolling or insulting/derogatory comments
-* Public or private harassment
-* Publishing other's private information, such as physical or electronic addresses, without explicit permission
-* Other unethical or unprofessional conduct.
-
-Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct. By adopting this Code of Conduct, project maintainers commit themselves to fairly and consistently applying these principles to every aspect of managing this project. Project maintainers who do not follow or enforce the Code of Conduct may be permanently removed from the project team.
-
-This code of conduct applies both within project spaces and in public spaces when an individual is representing the project or its community.
-
-Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by opening an issue or contacting one or more of the project maintainers.
-
-This Code of Conduct is adapted from the [Contributor Covenant](http://contributor-covenant.org), version 1.2.0, available at [http://contributor-covenant.org/version/1/2/0/](http://contributor-covenant.org/version/1/2/0/)

data/README.md

@@ -1,77 +0,0 @@
-# Sqreen
-
-Auto protection for you application.
-
-Copyright (c) 2015 Sqreen. All Rights Reserved.
-Please refer to our terms for more information: https://www.sqreen.io/terms.html
-
-## Installation
-
-Add this line to your application's Gemfile:
-
-```ruby
-gem 'sqreen'
-```
-
-And then execute:
-
-    $ bundle
-
-Or install it yourself as:
-
-    $ gem install sqreen
-
-## Configuration
-
-The only required parameter is your application's `token`.
-
-### By file
-- for Rails:
-```shell
-  $ echo token: your_token > /path/to/RailsApp/config/sqreen.yml
-```
-- for anything else:
-```shell
-      $ echo token: your_token > ~/sqreen.yml
-    ```
-
-### By environment:
-    ```shell
-          $ export SQREEN_TOKEN=your_token
-    ```
-
-The following can be set:
-
-*file*      | *environment*
-------------|-------------
-token       | SQREEN_TOKEN
-url         | SQREEN_URL
-verbosity   | SQREEN_VERBOSITY
-local_rules | SQREEN_RULES
-
-SQREEN_RULES allows the agent to use rules that do not come from the server, but
-from a local file.
-
-## Usage
-
-TODO: Write usage instructions here
-
-## Development
-
-```shell
-$ gem install bundler
-$ bundle
-```
-
-Check that everything is all right:
-```shell
-$ bundle exec rake test
-```
-
-Use `bin/console` for an interactive prompt that will allow you to experiment.
-
-To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).
-
-## Contributing
-
-Bug reports and pull requests are welcome on GitHub at https://github.com/sqreen/RubyAgent. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the [Contributor Covenant](contributor-covenant.org) code of conduct.

data/lib/sqreen-alt.rb

@@ -1 +0,0 @@
-require "sqreen"

data/lib/sqreen.rb

@@ -1,67 +0,0 @@
-# Copyright (c) 2015 Sqreen. All Rights Reserved.
-# Please refer to our terms for more information: https://www.sqreen.io/terms.html
-
-require 'sqreen/instrumentation'
-require 'sqreen/session'
-require 'sqreen/runner'
-require 'sqreen/callbacks'
-require 'sqreen/version'
-require 'sqreen/log'
-require 'sqreen/exception'
-require 'sqreen/configuration'
-require 'sqreen/events/attack'
-require 'sqreen/sdk'
-
-require 'thread'
-
-# Auto start the instrumentation.
-
-Sqreen.framework.on_start do |framework|
-  Thread.new do
-    begin
-      runner = nil
-      configuration = Sqreen.config_init(framework)
-      Sqreen.log.debug("Starting Sqreen #{Sqreen::VERSION}")
-      framework.sqreen_configuration = configuration
-      prevent_startup = Sqreen.framework.prevent_startup
-      if !prevent_startup
-        runner = Sqreen::Runner.new(configuration, framework)
-        runner.run_watcher
-      else
-        Sqreen.log.debug("#{prevent_startup} prevented Sqreen startup")
-      end
-    rescue Sqreen::TokenNotFoundException
-      Sqreen.log.error "Sorry but we couldn't find your Sqreen token.\nYour application is NOT currently protected by Sqreen.\n\nHave you filled your config/sqreen.yml?\n\n"
-    rescue Sqreen::TokenInvalidException
-      Sqreen.log.error "Sorry but your Sqreen token appears to be invalid.\nYour application is NOT currently protected by Sqreen.\n\nHave you correctly filled your config/sqreen.yml?\n\n"
-    rescue Exception => e
-      Sqreen.log.error e.inspect
-      Sqreen.log.debug e.backtrace.join("\n")
-      if runner
-        # immediately post exception
-        runner.session.post_sqreen_exception(Sqreen::RemoteException.new(e))
-        Sqreen.log.debug("runner = #{runner.inspect}")
-        begin
-          runner.remove_instrumentation
-        rescue => remove_exception
-          Sqreen.log.debug(remove_exception.inspect)
-          # We did not manage to remove instrumentation, state is unclear:
-          # terminate thread
-          return nil
-        end
-        begin
-          runner.logout(false)
-        rescue => logout_exception
-          Sqreen.log.debug(logout_exception.inspect)
-          nil
-        end
-      end
-      # Wait a few seconds before retrying
-      delay = rand(120)
-      Sqreen.log.debug("Sleeping #{delay} seconds before retry")
-      sleep(delay)
-      retry
-    end
-    Sqreen.log.debug("shutting down Sqreen #{Sqreen::VERSION}")
-  end
-end unless Sqreen::to_bool(ENV['SQREEN_DISABLE'])

data/lib/sqreen/actions.rb

@@ -1,261 +0,0 @@
-# Copyright (c) 2018 Sqreen. All Rights Reserved.
-# Please refer to our terms for more information: https://www.sqreen.io/terms.html
-
-require 'ipaddr'
-require 'sqreen/log'
-require 'sqreen/exception'
-require 'sqreen/sdk'
-require 'sqreen/frameworks'
-require 'singleton'
-
-module Sqreen
-  # Implements actions (behavior taken in response to agent signals)
-  module Actions
-    # Exception for when an unknown action type is gotten from the server
-    class UnknownActionType < ::Sqreen::Exception
-      attr_reader :action_type
-      def initialize(action_type)
-        super("no such action type: #{action_type}. Must be one of #{Base.known_types}")
-        @action_type = action_type
-      end
-    end
-
-    # Where the currently loaded actions are stored. Singleton
-    class Repository
-      include Singleton
-
-      def initialize
-        @actions = {} # indexed by subclass
-        @actions.default_proc = proc { |h, k| h[k] = [] }
-      end
-
-      def <<(action)
-        @actions[action.class] << action
-      end
-
-      def [](action_class)
-        @actions[action_class]
-      end
-
-      def clear
-        @actions.clear
-      end
-    end
-
-    # @return [Sqreen::Actions::Base]
-    def self.deserialize_action(hash)
-      action_type = hash['action']
-      raise 'no action type available' unless action_type
-
-      subclass = Base.get_type_class(action_type)
-      raise UnknownActionType, action_type unless subclass
-
-      id = hash['action_id']
-      raise 'no action id available' unless id
-
-      duration = hash['duration']
-      if !duration.nil? && duration <= 0
-        Sqreen.log.debug "Action #{id} is already expired"
-        return nil
-      end
-
-      opts = {
-        :duration => duration,
-        :send_response => hash['send_response'],
-      }
-
-      subclass.new(id, opts, hash['parameters'] || {})
-    end
-
-    # Base class for actions
-    class Base
-      attr_reader :id, :expiry, :send_response
-
-      def initialize(id, opts)
-        @id = id
-        duration = opts[:duration]
-        @expiry = Time.new + duration unless duration.nil?
-        @send_response = if opts[:send_response].nil?
-                           true
-                         else
-                           !!opts[:send_response]
-                         end
-      end
-
-      # See Sqreen::CB for return values
-      def run(*args)
-        return if expiry && Time.new > expiry
-        ret = do_run *args
-        unless ret.nil? || !@send_response
-          Sqreen.internal_track(event_name,
-                                'properties' => {
-                                  'output' => event_properties(*args),
-                                  'action_id' => id,
-                                })
-        end
-        ret
-      end
-
-      protected
-
-      def do_run(*_args)
-        raise ::Sqreen::NotImplementedYet, "do_run not implemented in #{self.class}"
-        # implement in subclasses
-      end
-
-      def event_properties(*_run_args)
-        raise ::Sqreen::NotImplementedYet, "event_properties not implemented in #{self.class}"
-        # implement in subclasses
-      end
-
-      private
-
-      def event_name
-        "sq.action.#{self.class.type_name}"
-      end
-
-      @@subclasses = {}
-      class << self
-        private :new
-
-        attr_reader :type_name
-
-        def get_type_class(name)
-          @@subclasses[name]
-        end
-
-        def known_types
-          @@subclasses.keys
-        end
-
-        def inherited(subclass)
-          class << subclass
-            public :new
-          end
-        end
-
-        protected
-
-        def type_name=(name)
-          @type_name = name
-          @@subclasses[name] = self
-        end
-      end
-    end
-
-    module IpRanges
-      attr_reader :ranges
-
-      def parse_ip_ranges(params)
-        ranges = params['ip_cidr']
-        unless ranges && ranges.is_a?(Array) && !ranges.empty?
-          raise 'no non-empty ip_cidr array present'
-        end
-
-        @ranges = ranges.map &IPAddr.method(:new)
-      end
-
-      def matches_ip?(client_ip)
-        parsed_ip = IPAddr.new client_ip
-        found = ranges.find { |r| r.include? parsed_ip }
-        return false unless found
-
-        Sqreen.log.debug("Client ip #{client_ip} matches #{found.inspect}")
-        true
-      end
-    end
-
-    # Block a list of IP address ranges. Standard "raise" behavior.
-    class BlockIp < Base
-      include IpRanges
-      self.type_name = 'block_ip'
-
-      def initialize(id, opts, params = {})
-        super(id, opts)
-        parse_ip_ranges params
-      end
-
-      def do_run(client_ip)
-        return nil unless matches_ip? client_ip
-        e = Sqreen::AttackBlocked.new("Blocked client's IP (action: #{id}). No action is required")
-        { :status => :raise, :exception => e }
-      end
-
-      def event_properties(client_ip)
-        { 'ip_address' => client_ip }
-      end
-    end
-
-    # Block a list of IP address ranges by forcefully redirecting the user
-    # to a specific URL.
-    class RedirectIp < Base
-      include IpRanges
-      self.type_name = 'redirect_ip'
-
-      attr_reader :redirect_url
-
-      def initialize(id, opts, params = {})
-        super(id, opts)
-        @redirect_url = params['url']
-        raise "no url provided for action #{id}" unless @redirect_url
-        parse_ip_ranges params
-      end
-
-      def do_run(client_ip)
-        return nil unless matches_ip? client_ip
-        Sqreen.log.info "Will request redirect for client with IP #{client_ip} (action: #{id}). "
-        {
-          :status => :skip,
-          :new_return_value => [303, { 'Location' => @redirect_url }, ['']],
-        }
-      end
-
-      def event_properties(client_ip)
-        { 'ip_address' => client_ip, 'url' => @redirect_url }
-      end
-    end
-
-    # Blocks a user at the point Sqreen::identify()
-    # or Sqreen::auth_track() are called
-    class BlockUser < Base
-      self.type_name = 'block_user'
-
-      def initialize(id, opts, params = {})
-        super(id, opts)
-        @users = params['users']
-        raise ::Sqreen::Exception, 'nil "users" param for block_user action' if @users.nil?
-        raise ::Sqreen::Exception, '"users" param must be an array' unless @users.is_a? Array
-      end
-
-      def do_run(identity_params)
-        return unless @users.include? stringify_keys(identity_params)
-        Sqreen.log.info(
-          "Will raise due to user being blocked by action #{id}. " \
-          "Blocked user identity: #{identity_params}"
-        )
-
-        e = Sqreen::AttackBlocked.new(
-          "Blocked user with identity #{identity_params} " \
-          'due to automatic security response. No action is required'
-        )
-
-        {
-          :status => :raise,
-          :exception => e,
-        }
-      end
-
-      def event_properties(identity_params)
-        { 'user' => identity_params }
-      end
-
-      private
-
-      def stringify_keys(hash)
-        Hash[
-          hash.map { |k, v| [k.to_s, v] }
-        ]
-      end
-    end
-  end
-end