sqreen 1.17.0-java → 1.17.2.beta1-java

data/lib/sqreen/version.rb

@@ -1,5 +1,5 @@
 # Copyright (c) 2015 Sqreen. All Rights Reserved.
 # Please refer to our terms for more information: https://www.sqreen.io/terms.html
 module Sqreen
-  VERSION = '1.17.0'.freeze
+  VERSION = '1.17.2.beta1'.freeze
 end

data/lib/sqreen/web_server.rb

@@ -0,0 +1,54 @@
+# Copyright (c) 2015 Sqreen. All Rights Reserved.
+# Please refer to our terms for more information: https://www.sqreen.io/terms.html
+
+require 'sqreen/log'
+require 'sqreen/web_server/generic'
+require 'sqreen/web_server/unicorn'
+require 'sqreen/web_server/rainbows'
+require 'sqreen/web_server/puma'
+require 'sqreen/web_server/passenger'
+require 'sqreen/web_server/thin'
+require 'sqreen/web_server/webrick'
+
+module Sqreen
+  module WebServer
+    module_function
+
+    def attach
+      extend(detect)
+
+      Sqreen.log.debug "[#{Process.pid}] #{detect.inspect}"
+
+      if forking? && preload_app? && master?
+        Sqreen.log.debug "[#{Process.pid}] master process #{Process.pid} delegating Sqreen worker boot to forked web worker processes"
+        Sqreen.log.debug('Sqreen detected a forking web server with preloading')
+        Sqreen.log.debug("master process #{Process.pid} delegating Sqreen worker boot to forked web worker processes")
+        after_fork { yield }
+      elsif forking? && !master? && !preload_app?
+        Sqreen.log.debug "[#{Process.pid}] Booting Sqreen worker in process #{Process.pid}"
+        Sqreen.log.debug('Sqreen detected a forked web worker without preloading')
+        Sqreen.log.debug("Booting Sqreen worker in process #{Process.pid}")
+        yield
+      elsif !forking?
+        Sqreen.log.debug "[#{Process.pid}] Booting Sqreen worker in process #{Process.pid}"
+        Sqreen.log.debug('Sqreen detected a single-process web server')
+        Sqreen.log.debug("Booting Sqreen worker in process #{Process.pid}")
+        yield
+      else
+        Sqreen.log.debug "[#{Process.pid}] NOOP"
+      end
+    end
+
+    def detect
+      [
+        Sqreen::WebServer::Puma,
+        Sqreen::WebServer::Rainbows,
+        Sqreen::WebServer::Unicorn,
+        Sqreen::WebServer::Passenger,
+        Sqreen::WebServer::Thin,
+        Sqreen::WebServer::WEBrick,
+        Sqreen::WebServer::Generic,
+      ].find(&:active?)
+    end
+  end
+end

data/lib/sqreen/web_server/generic.rb

@@ -0,0 +1,24 @@
+# Copyright (c) 2015 Sqreen. All Rights Reserved.
+# Please refer to our terms for more information: https://www.sqreen.io/terms.html
+
+module Sqreen
+  module WebServer
+    module Generic
+      def self.active?
+        true
+      end
+
+      def forking?
+        false
+      end
+
+      def preload_app?
+        false
+      end
+
+      def before_fork(&block); end
+
+      def after_fork(&block); end
+    end
+  end
+end

data/lib/sqreen/web_server/passenger.rb

@@ -0,0 +1,33 @@
+# Copyright (c) 2015 Sqreen. All Rights Reserved.
+# Please refer to our terms for more information: https://www.sqreen.io/terms.html
+
+module Sqreen
+  module WebServer
+    module Passenger
+      def self.active?
+        Sqreen::Dependency.const_exist?('PhusionPassenger::App')
+      end
+
+      def forking?
+        ::PhusionPassenger::App.options['spawn_method'] == 'smart' # otherwise direct
+      end
+
+      def preload_app?
+        forking? # overarching spawn method behavior
+      end
+
+      def master?
+        preload_app? # overarching spawn method behavior
+      end
+
+      def before_fork(&block); end
+
+      def after_fork
+        after_fork = lambda do |forked|
+          yield if forked # forked == true in child
+        end
+        ::PhusionPassenger.on_event(:starting_worker_process, &after_fork)
+      end
+    end
+  end
+end

data/lib/sqreen/web_server/puma.rb

@@ -0,0 +1,62 @@
+# Copyright (c) 2015 Sqreen. All Rights Reserved.
+# Please refer to our terms for more information: https://www.sqreen.io/terms.html
+
+module Sqreen
+  module WebServer
+    module Puma
+      def self.active?
+        Sqreen::Dependency.const_exist?('Puma::Runner') && ObjectSpace.each_object(::Puma::Runner).count > 0
+      end
+
+      def forking?
+        !cluster.nil?
+      end
+
+      def preload_app?
+        forking? && (cluster && cluster.preload? || false)
+      end
+
+      def master?
+        # HACK: expects outside calling timimg
+        # - with preloading, this is hit early in master and records its PID
+        # - without preloading but forking, the app will be loaded in the child, so recorded PID stays nil
+        # - without forking, master makes no sense, recorded PID stays nil
+        master! if preload_app?
+
+        Sqreen.log.debug "[#{Process.pid}] master? #{@master_pid == Process.pid}"
+
+        @master_pid == Process.pid
+      end
+
+      def before_fork
+        before_fork = lambda do |_ = nil| # 3.x sends an arg but <3.0 doesn't
+          yield
+        end
+        (configuration.options[:before_fork] || []) << before_fork
+      end
+
+      def after_fork
+        after_fork = lambda do |_|
+          yield
+        end
+        (configuration.options[:before_worker_boot] ||= []) << after_fork
+      end
+
+      private
+
+      def master!
+        @master_pid ||= Process.pid
+      end
+
+      def cluster
+        return unless ::Puma.const_defined?('Cluster')
+
+        ObjectSpace.each_object(::Puma::Cluster).first
+      end
+
+      def configuration
+        ObjectSpace.each_object(::Puma::Configuration).first
+      end
+    end
+  end
+end

data/lib/sqreen/web_server/rainbows.rb

@@ -0,0 +1,14 @@
+# Copyright (c) 2015 Sqreen. All Rights Reserved.
+# Please refer to our terms for more information: https://www.sqreen.io/terms.html
+
+module Sqreen
+  module WebServer
+    module Rainbows
+      include Sqreen::WebServer::Unicorn
+
+      def self.active?
+        Sqreen::Dependency.const_exist?('Rainbows::HttpServer') && ObjectSpace.each_object(::Rainbows::HttpServer).count > 0
+      end
+    end
+  end
+end

data/lib/sqreen/web_server/thin.rb

@@ -0,0 +1,14 @@
+# Copyright (c) 2015 Sqreen. All Rights Reserved.
+# Please refer to our terms for more information: https://www.sqreen.io/terms.html
+
+module Sqreen
+  module WebServer
+    module Thin
+      include Sqreen::WebServer::Generic
+
+      def self.active?
+        Sqreen::Dependency.const_exist?('Thin::Server') && ObjectSpace.each_object(::Thin::Server).count > 0
+      end
+    end
+  end
+end

data/lib/sqreen/web_server/unicorn.rb

@@ -0,0 +1,52 @@
+# Copyright (c) 2015 Sqreen. All Rights Reserved.
+# Please refer to our terms for more information: https://www.sqreen.io/terms.html
+
+module Sqreen
+  module WebServer
+    module Unicorn
+      def self.active?
+        Sqreen::Dependency.const_exist?('Unicorn::SocketHelper') && ObjectSpace.each_object(::Unicorn::SocketHelper).count > 0
+      end
+
+      def forking?
+        true
+      end
+
+      def master?
+        !master.nil?
+      end
+
+      def preload_app?
+        ObjectSpace.each_object(::Unicorn::HttpServer).first.preload_app
+      end
+
+      def before_fork
+        before_fork = master.before_fork
+        before_fork_wrapper = lambda do |a, b|
+          before_fork.call(a, b).tap { yield }
+        end
+        master.before_fork = before_fork_wrapper
+      end
+
+      def after_fork
+        after_fork = master.after_fork
+        after_fork_wrapper = lambda do |a, b|
+          after_fork.call(a, b).tap { yield }
+        end
+        master.after_fork = after_fork_wrapper
+      end
+
+      private
+
+      def master
+        ObjectSpace.each_object(::Unicorn::HttpServer).select do |s|
+          if s.is_a? Struct # unicorn <2.0
+            s.master_pid == Process.pid
+          else
+            s.instance_eval { @master_pid } == Process.pid
+          end
+        end.first
+      end
+    end
+  end
+end

data/lib/sqreen/web_server/webrick.rb

@@ -0,0 +1,14 @@
+# Copyright (c) 2015 Sqreen. All Rights Reserved.
+# Please refer to our terms for more information: https://www.sqreen.io/terms.html
+
+module Sqreen
+  module WebServer
+    module WEBrick
+      include Sqreen::WebServer::Generic
+
+      def self.active?
+        Sqreen::Dependency.const_exist?('WEBrick::HTTPServer') && ObjectSpace.each_object(::WEBrick::HTTPServer).count > 0
+      end
+    end
+  end
+end

data/lib/sqreen/worker.rb

@@ -0,0 +1,68 @@
+# Copyright (c) 2015 Sqreen. All Rights Reserved.
+# Please refer to our terms for more information: https://www.sqreen.io/terms.html
+
+require 'thread'
+
+module Sqreen
+  module Worker
+    module_function
+
+    def start(framework)
+      Sqreen.log.debug('Starting Sqreen worker thread')
+
+      Thread.new do
+        begin
+          runner = nil
+          Sqreen.log.debug("Reading configuration")
+          configuration = Sqreen.config_init(framework)
+          framework.sqreen_configuration = configuration
+          Sqreen.log.debug("Initializing logs")
+          Sqreen.log_init
+          Sqreen.log.debug("Starting Sqreen #{Sqreen::VERSION}")
+          prevent_startup = Sqreen.framework.prevent_startup
+          if !prevent_startup
+            warn "[#{Process.pid}] Sqreen logging at level #{Sqreen.log.instance_eval { @logger }.level} to #{Sqreen.log.instance_eval { @logger }.instance_eval { @logdev.filename }}"
+            runner = Sqreen::Runner.new(configuration, framework)
+            runner.run_watcher
+          else
+            Sqreen.log.debug("#{prevent_startup} prevented Sqreen startup")
+          end
+        rescue Sqreen::TokenNotFoundException
+          Sqreen.log.error "Sorry but we couldn't find your Sqreen token.\nYour application is NOT currently protected by Sqreen.\n\nHave you filled your config/sqreen.yml?\n\n"
+        rescue Sqreen::TokenInvalidException
+          Sqreen.log.error "Sorry but your Sqreen token appears to be invalid.\nYour application is NOT currently protected by Sqreen.\n\nHave you correctly filled your config/sqreen.yml?\n\n"
+        rescue Exception => e # rubocop:disable Lint/RescueException
+          Sqreen.log.debug("General exception caught: #{e.inspect}")
+          Sqreen.log.debug e.backtrace
+          if runner
+            unless e.is_a?(Sqreen::Unauthorized)
+              Sqreen.log.debug("Immediately posting exception for runner #{runner.inspect}")
+              runner.session.post_sqreen_exception(Sqreen::RemoteException.new(e))
+            end
+            begin
+              runner.remove_instrumentation
+            rescue StandardError => e
+              Sqreen.log.debug("Unexpected exception when removing instrumentation: #{e.inspect}")
+              Sqreen.log.debug e.backtrace
+              Sqreen.log.error("Terminating Sqreen thread")
+              return nil
+            end
+            begin
+              runner.logout(false)
+            rescue StandardError => e
+              Sqreen.log.debug("Unexpected exception when logging out: #{remove_exception.inspect}")
+              Sqreen.log.debug(e.backtrace)
+              nil
+            end
+          end
+          # Wait a few seconds before retrying
+          delay = rand(120)
+          Sqreen.log.debug("Sleeping #{delay} seconds before restarting Sqreen thread")
+          sleep(delay)
+          retry
+        end
+        Sqreen.log.debug("Shutting down Sqreen #{Sqreen::VERSION}")
+      end
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sqreen
 version: !ruby/object:Gem::Version
-  version: 1.17.0
+  version: 1.17.2.beta1
 platform: java
 authors:
 - Sqreen
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2019-03-23 00:00:00.000000000 Z
+date: 2019-07-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement
@@ -45,12 +45,14 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- CHANGELOG.md
 - CODE_OF_CONDUCT.md
 - README.md
 - Rakefile
 - lib/sqreen-alt.rb
 - lib/sqreen.rb
 - lib/sqreen/actions.rb
+- lib/sqreen/agent.rb
 - lib/sqreen/attack_detected.html
 - lib/sqreen/binding_accessor.rb
 - lib/sqreen/ca.crt
@@ -64,6 +66,15 @@ files:
 - lib/sqreen/context.rb
 - lib/sqreen/deliveries/batch.rb
 - lib/sqreen/deliveries/simple.rb
+- lib/sqreen/dependency.rb
+- lib/sqreen/dependency/callback.rb
+- lib/sqreen/dependency/detector.rb
+- lib/sqreen/dependency/hook.rb
+- lib/sqreen/dependency/hook_point.rb
+- lib/sqreen/dependency/new_relic.rb
+- lib/sqreen/dependency/rack.rb
+- lib/sqreen/dependency/rails.rb
+- lib/sqreen/dependency/sentry.rb
 - lib/sqreen/event.rb
 - lib/sqreen/events/attack.rb
 - lib/sqreen/events/remote_exception.rb
@@ -133,10 +144,21 @@ files:
 - lib/sqreen/shared_storage23.rb
 - lib/sqreen/trie.rb
 - lib/sqreen/version.rb
+- lib/sqreen/web_server.rb
+- lib/sqreen/web_server/generic.rb
+- lib/sqreen/web_server/passenger.rb
+- lib/sqreen/web_server/puma.rb
+- lib/sqreen/web_server/rainbows.rb
+- lib/sqreen/web_server/thin.rb
+- lib/sqreen/web_server/unicorn.rb
+- lib/sqreen/web_server/webrick.rb
+- lib/sqreen/worker.rb
 homepage: https://www.sqreen.io/
 licenses: []
 metadata: {}
-post_install_message:
+post_install_message: |2
+      This is a Sqreen beta release and may not work in all situations.
+      Make sure to review CHANGELOG.md for important details.
 rdoc_options: []
 require_paths:
 - lib
@@ -144,12 +166,12 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: '2.2'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
 rubyforge_project:
 rubygems_version: 2.7.7