sqreen 1.14.0.beta3 → 1.14.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f1a88f697fb1155fa5e354c753604e97c9446944d2c8b7c75ed8aebbb586845a
-  data.tar.gz: c7440ae2799d091d33a75c5b29c8d583a041335ab5b0597820388349368bf0a2
+  metadata.gz: f6b572a1d9fe1440b268e4edcdcaab29a177edb3d7d6f915b100d57f77219ad5
+  data.tar.gz: b05840f3d4cbc358d089b50299ccfdc7da0947a52f2603e34d572a97acb1c946
 SHA512:
-  metadata.gz: 64b3110988d5e5360640fb189b947320f58eb7a075cc70d39e37abc8df2802444063dc573755a1a50b47d3c9952ca4ccdf9b2272f11d82fbf689fc8e5bd6a971
-  data.tar.gz: 62d4e5e3f8b07b6d0aaa502decc9ff5a62fdbd1dd4a1709d37614bc70b776ddd31436587bb38200d101b9b5728e792993737d066092b3ae4a7df4c44d9b9ca33
+  metadata.gz: be7806a0578560be5926fa04bb3201440072237ce377f4aba73fe4a3b763b2bcf75d585fff195238e8acad6986ef1112635837d1d40d800ad4a6a5df002edb13
+  data.tar.gz: b5d2cf720663a12d7add7b1f5f3ccf23bea712403898b97e10c45e741a1883fd9025b605f3ed2d02fd08f172ef2948b86f15e3e4defc2df6c2f3140e76d1d8da

data/lib/sqreen/actions.rb

@@ -177,7 +177,8 @@ module Sqreen
 
       def do_run(client_ip)
         return nil unless matches_ip? client_ip
-        e = Sqreen::AttackBlocked.new("Blocked client's IP (action: #{id}). No action is required")
+        e = Sqreen::AttackBlocked.new("Blocked client's IP #{client_ip} " \
+          "(action: #{id} covering range(s) #{ranges}). No action is required")
         { :status => :raise, :exception => e }
       end
 
@@ -203,7 +204,8 @@ module Sqreen
 
       def do_run(client_ip)
         return nil unless matches_ip? client_ip
-        Sqreen.log.info "Will request redirect for client with IP #{client_ip} (action: #{id}). "
+        Sqreen.log.info "Will request redirect for client with IP #{client_ip} " \
+          "(action: #{id} covering range(s) #{ranges})."
         {
           :status => :skip,
           :new_return_value => [303, { 'Location' => @redirect_url }, ['']],

data/lib/sqreen/exception.rb

@@ -8,7 +8,11 @@ module Sqreen
   class Exception < ::StandardError
     def initialize(msg = nil, *args)
       super(msg, *args)
-      Sqreen.log.error msg if msg
+      log_message msg if msg
+    end
+
+    def log_message(msg)
+      Sqreen.log.error(msg)
     end
   end
 
@@ -24,6 +28,9 @@ module Sqreen
   # Sqreen users when watching their logs. It should not raise any concern to
   # them.
   class AttackBlocked < Exception
+    def log_message(msg)
+      Sqreen.log.warn(msg)
+    end
   end
 
   class NotImplementedYet < Exception

data/lib/sqreen/frameworks/generic.rb

@@ -519,6 +519,18 @@ module Sqreen
         Sqreen.log.warn "Failed ignoring AttackBlocked on NewRelic: #{e.inspect}"
       end
 
+      def worker_fork_detection
+        # only Puma currently supported
+        return unless defined?(Puma::Cluster) && Puma::Cluster.instance_methods.include?(:worker)
+        cur_worker_meth = Puma::Cluster.instance_method(:worker)
+        Puma::Cluster.class_eval do
+          define_method(:worker) do |*args|
+            Sqreen.on_forked_worker = true
+            cur_worker_meth.bind(self)[*args]
+          end
+        end
+      end
+
       private
 
       def split_ip_addresses(ip_addresses)

data/lib/sqreen/frameworks/rails.rb

@@ -89,6 +89,7 @@ module Sqreen
       def on_start(&block)
         @calling_pid = Process.pid
         Init.startup do |app|
+          worker_fork_detection
           sentry_ignore_exceptions
           newrelic_ignore_errors
           hook_rack_request(app.class, &block)

data/lib/sqreen/frameworks/sinatra.rb

@@ -16,6 +16,7 @@ module Sqreen
       end
 
       def on_start(&block)
+        worker_fork_detection
         sentry_ignore_exceptions
         newrelic_ignore_errors
         hook_app_build(Sinatra::Base)

data/lib/sqreen/js/mini_racer_adapter.rb

@@ -34,9 +34,9 @@ module Sqreen
         @module = vendored ? Sqreen::MiniRacer : MiniRacer
         @source = source
         @recycle_runtime_every = GC_MINI_RACER
-        @snapshot = @module::Snapshot.new(source)
         @runtimes = []
         @tl_key = "SQREEN_MINI_RACER_CONTEXT_#{object_id}".freeze
+        snapshot if Sqreen.on_forked_worker? # called to eagerly initialize snapshot
         unless @@ctx_defined
           self.class.define_sqreen_context(@module)
           @@ctx_defined = true
@@ -52,7 +52,7 @@ module Sqreen
           dead_runtime = true
         end
         if dead_runtime
-          new_runtime = SqreenContext.new(:snapshot => @snapshot)
+          new_runtime = SqreenContext.new(:snapshot => snapshot)
           push_runtime new_runtime
           mini_racer_context = {
               :c => 0,
@@ -72,6 +72,10 @@ module Sqreen
 
       private
 
+      def snapshot
+        @snapshot ||= @module::Snapshot.new(@source)
+      end
+
       def push_runtime(runtime)
         @runtimes.delete_if do |th, runt, _thid|
           del = th.nil? || !th.weakref_alive? || !th.alive?

data/lib/sqreen/runner.rb

@@ -60,6 +60,9 @@ module Sqreen
     attr_accessor :logged_in
     alias logged_in? logged_in
 
+    attr_accessor :on_forked_worker
+    alias on_forked_worker? on_forked_worker
+
     attr_reader :whitelisted_paths
     def update_whitelisted_paths(paths)
       @whitelisted_paths = paths.freeze

data/lib/sqreen/version.rb

@@ -1,5 +1,5 @@
 # Copyright (c) 2015 Sqreen. All Rights Reserved.
 # Please refer to our terms for more information: https://www.sqreen.io/terms.html
 module Sqreen
-  VERSION = '1.14.0.beta3'.freeze
+  VERSION = '1.14.0'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sqreen
 version: !ruby/object:Gem::Version
-  version: 1.14.0.beta3
+  version: 1.14.0
 platform: ruby
 authors:
 - Sqreen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-09-06 00:00:00.000000000 Z
+date: 2018-09-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: sq_mini_racer
@@ -132,9 +132,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
 rubyforge_project: 
 rubygems_version: 2.7.7