sqreen 1.18.0 → 1.18.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a588437667070c3e175082755b4f63a1bcc2a1c1f599142fc56ac2348d05a1bf
-  data.tar.gz: 1dd5d9a28a0d4285c807587d1a0740342561950c85c4fc84e273ced99b90a6c7
+  metadata.gz: 8a60b6d82dda8a468ead32c8bf1f450f633cd3093ef9bc5d4de7aecbd29625c1
+  data.tar.gz: 1bf856cf8bb9a3fc1e363cfbf119459d4656500db3641e367bd40d62fe6b3176
 SHA512:
-  metadata.gz: 4e2d876f635ceadf46df13484f50ec6dfd418ebece431916330d2319be79f6a0f38c27a73f2a4261809af30fc3d32e6024a68c415b372ad7214b245f2e2443f6
-  data.tar.gz: 38a0ee125e1ded9a6bbddd440f30a3011b7c36051ac7393f5cd8294a128952fd9f7a93735b20496394e77a042a14c95199817fad6598625d5583030f8c50aace
+  metadata.gz: e2f3528dbe5a32798c94c77f60f249b4271502d4be504e2ddaa1137a4af4878c9a59bb9455b4693adfcdde1818dc3d5875fbb218ab12c07e4766df082f5f75ab
+  data.tar.gz: bd587c43bfed1c1a68c2acaeeab7c78927bb329ed569c5bd4e92af1a0a36c3eb1a002e01273a2505d7c5e30b7df66a0ae4f197ac9a8c472e7c3c1a1e8ac27788

data/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 1.18.1
+
+* Improve handling of scoped IPv6 addresses
+* Remove spurious warning on Rails 6
+* Add missing WAF constant check
+
 ## 1.18.0
 
 * Support In-App WAF

data/lib/sqreen/actions.rb

@@ -169,7 +169,7 @@ module Sqreen
       end
 
       def matching_actions(client_ip)
-        parsed_ip = IPAddr.new(client_ip)
+        parsed_ip = IPAddr.new(client_ip.gsub(/%[^%\/]+/, ''))
         trie = parsed_ip.family == Socket::AF_INET6 ? @trie_v6 : @trie_v4
         return [] unless trie
         found = trie.search_matching(parsed_ip.to_i, parsed_ip.family)

data/lib/sqreen/dependency/rails.rb

@@ -15,6 +15,8 @@ module Sqreen
       end
 
       def inspect_middlewares
+        return unless ::Rails.application.middleware.respond_to?(:map)
+
         Sqreen.log.debug { "Middlewares: " << ::Rails.application.middleware.map(&:inspect).inspect }
       end
 

data/lib/sqreen/frameworks.rb

@@ -13,7 +13,7 @@ module Sqreen
     klass = case
             when defined?(::Rails) && defined?(::Rails::VERSION)
               case Rails::VERSION::MAJOR.to_i
-              when 4, 5
+              when 4, 5, 6
                 require 'sqreen/frameworks/rails'
                 Sqreen::Frameworks::RailsFramework
               when 3

data/lib/sqreen/rules_callbacks/waf.rb

@@ -22,13 +22,17 @@ module Sqreen
         @libsqreen
       end
 
+      def self.waf?
+        Sqreen::Dependency.const_exist?('LibSqreen::WAF')
+      end
+
       attr_reader :binding_accessors, :budget, :waf_rule_name
 
       def initialize(*args)
         super(*args)
         @overtimeable = false
 
-        unless WAFCB.libsqreen?
+        unless WAFCB.libsqreen? && WAFCB.waf?
           Sqreen.log.warn('libsqreen gem not found')
           return
         end
@@ -57,10 +61,7 @@ module Sqreen
       end
 
       def pre(instance, args, _budget)
-        unless WAFCB.libsqreen?
-          Sqreen.log.warn('libsqreen not required')
-          return
-        end
+        return unless WAFCB.libsqreen? && WAFCB.waf?
 
         request = framework.request
         return if !waf_rule_name || !request

data/lib/sqreen/version.rb

@@ -1,5 +1,5 @@
 # Copyright (c) 2015 Sqreen. All Rights Reserved.
 # Please refer to our terms for more information: https://www.sqreen.io/terms.html
 module Sqreen
-  VERSION = '1.18.0'.freeze
+  VERSION = '1.18.1'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sqreen
 version: !ruby/object:Gem::Version
-  version: 1.18.0
+  version: 1.18.1
 platform: ruby
 authors:
 - Sqreen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-10-15 00:00:00.000000000 Z
+date: 2019-10-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: sq_mini_racer