sqreen 1.18.2-java → 1.19.0-java

data/lib/sqreen/web_server.rb

@@ -1,3 +1,5 @@
+# typed: ignore
+
 # Copyright (c) 2015 Sqreen. All Rights Reserved.
 # Please refer to our terms for more information: https://www.sqreen.com/terms.html
 

data/lib/sqreen/web_server/generic.rb

@@ -1,3 +1,5 @@
+# typed: true
+
 # Copyright (c) 2015 Sqreen. All Rights Reserved.
 # Please refer to our terms for more information: https://www.sqreen.com/terms.html
 

data/lib/sqreen/web_server/passenger.rb

@@ -1,3 +1,5 @@
+# typed: ignore
+
 # Copyright (c) 2015 Sqreen. All Rights Reserved.
 # Please refer to our terms for more information: https://www.sqreen.com/terms.html
 

data/lib/sqreen/web_server/puma.rb

@@ -1,3 +1,5 @@
+# typed: ignore
+
 # Copyright (c) 2015 Sqreen. All Rights Reserved.
 # Please refer to our terms for more information: https://www.sqreen.com/terms.html
 

data/lib/sqreen/web_server/rainbows.rb

@@ -1,3 +1,5 @@
+# typed: ignore
+
 # Copyright (c) 2015 Sqreen. All Rights Reserved.
 # Please refer to our terms for more information: https://www.sqreen.com/terms.html
 

data/lib/sqreen/web_server/thin.rb

@@ -1,3 +1,5 @@
+# typed: ignore
+
 # Copyright (c) 2015 Sqreen. All Rights Reserved.
 # Please refer to our terms for more information: https://www.sqreen.com/terms.html
 

data/lib/sqreen/web_server/unicorn.rb

@@ -1,3 +1,5 @@
+# typed: ignore
+
 # Copyright (c) 2015 Sqreen. All Rights Reserved.
 # Please refer to our terms for more information: https://www.sqreen.com/terms.html
 

data/lib/sqreen/web_server/webrick.rb

@@ -1,3 +1,5 @@
+# typed: true
+
 # Copyright (c) 2015 Sqreen. All Rights Reserved.
 # Please refer to our terms for more information: https://www.sqreen.com/terms.html
 

data/lib/sqreen/worker.rb

@@ -1,3 +1,5 @@
+# typed: false
+
 # Copyright (c) 2015 Sqreen. All Rights Reserved.
 # Please refer to our terms for more information: https://www.sqreen.com/terms.html
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sqreen
 version: !ruby/object:Gem::Version
-  version: 1.18.2
+  version: 1.19.0
 platform: java
 authors:
 - Sqreen
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2019-11-12 00:00:00.000000000 Z
+date: 2020-05-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement
@@ -47,43 +47,63 @@ extra_rdoc_files: []
 files:
 - CHANGELOG.md
 - CODE_OF_CONDUCT.md
+- LICENSE
 - README.md
 - Rakefile
-- lib/sqreen-alt.rb
 - lib/sqreen.rb
 - lib/sqreen/actions.rb
+- lib/sqreen/actions/actions_index.rb
+- lib/sqreen/actions/base.rb
+- lib/sqreen/actions/block_ip.rb
+- lib/sqreen/actions/block_user.rb
+- lib/sqreen/actions/ip_range_indexed_action_class.rb
+- lib/sqreen/actions/ip_ranges_index.rb
+- lib/sqreen/actions/redirect_ip.rb
+- lib/sqreen/actions/redirect_user.rb
+- lib/sqreen/actions/repository.rb
+- lib/sqreen/actions/unknown_action_type.rb
+- lib/sqreen/actions/user_action_class.rb
+- lib/sqreen/actions/users_index.rb
 - lib/sqreen/agent.rb
+- lib/sqreen/attack_blocked.rb
 - lib/sqreen/attack_detected.html
 - lib/sqreen/backport.rb
+- lib/sqreen/backport/clock_gettime.rb
 - lib/sqreen/backport/original_name.rb
 - lib/sqreen/binding_accessor.rb
+- lib/sqreen/binding_accessor/path_elem.rb
+- lib/sqreen/binding_accessor/transforms.rb
 - lib/sqreen/ca.crt
 - lib/sqreen/call_countable.rb
-- lib/sqreen/callback_tree.rb
-- lib/sqreen/callbacks.rb
 - lib/sqreen/capped_queue.rb
+- lib/sqreen/cb.rb
+- lib/sqreen/cb_tree.rb
 - lib/sqreen/condition_evaluator.rb
 - lib/sqreen/conditionable.rb
 - lib/sqreen/configuration.rb
 - lib/sqreen/context.rb
+- lib/sqreen/default_cb.rb
+- lib/sqreen/deferred_logger.rb
+- lib/sqreen/deliveries.rb
 - lib/sqreen/deliveries/batch.rb
 - lib/sqreen/deliveries/simple.rb
 - lib/sqreen/dependency.rb
-- lib/sqreen/dependency/callback.rb
 - lib/sqreen/dependency/detector.rb
-- lib/sqreen/dependency/hook.rb
-- lib/sqreen/dependency/hook_point.rb
+- lib/sqreen/dependency/libsqreen.rb
 - lib/sqreen/dependency/new_relic.rb
 - lib/sqreen/dependency/rack.rb
 - lib/sqreen/dependency/rails.rb
 - lib/sqreen/dependency/sentry.rb
 - lib/sqreen/dependency/sinatra.rb
 - lib/sqreen/encoding_sanitizer.rb
+- lib/sqreen/error_handling_middleware.rb
 - lib/sqreen/event.rb
 - lib/sqreen/events/attack.rb
 - lib/sqreen/events/remote_exception.rb
 - lib/sqreen/events/request_record.rb
 - lib/sqreen/exception.rb
+- lib/sqreen/formatter_with_tid.rb
+- lib/sqreen/framework_cb.rb
 - lib/sqreen/frameworks.rb
 - lib/sqreen/frameworks/generic.rb
 - lib/sqreen/frameworks/rails.rb
@@ -91,11 +111,29 @@ files:
 - lib/sqreen/frameworks/request_recorder.rb
 - lib/sqreen/frameworks/sinatra.rb
 - lib/sqreen/frameworks/sqreen_test.rb
-- lib/sqreen/instrumentation.rb
+- lib/sqreen/graft.rb
+- lib/sqreen/graft/call.rb
+- lib/sqreen/graft/callback.rb
+- lib/sqreen/graft/hook.rb
+- lib/sqreen/graft/hook_point.rb
+- lib/sqreen/graft/hook_point_error.rb
+- lib/sqreen/invalid_signature_exception.rb
+- lib/sqreen/js.rb
+- lib/sqreen/js/call_context.rb
+- lib/sqreen/js/context_pool.rb
+- lib/sqreen/js/exec_js_runnable.rb
 - lib/sqreen/js/execjs_adapter.rb
+- lib/sqreen/js/executable_js.rb
 - lib/sqreen/js/js_service.rb
+- lib/sqreen/js/js_service_adapter.rb
 - lib/sqreen/js/mini_racer_adapter.rb
+- lib/sqreen/js/mini_racer_executable_js.rb
+- lib/sqreen/js/thread_local_exec_js_runnable.rb
+- lib/sqreen/legacy.rb
+- lib/sqreen/legacy/instrumentation.rb
 - lib/sqreen/log.rb
+- lib/sqreen/log/loggable.rb
+- lib/sqreen/logger.rb
 - lib/sqreen/metrics.rb
 - lib/sqreen/metrics/average.rb
 - lib/sqreen/metrics/base.rb
@@ -103,57 +141,85 @@ files:
 - lib/sqreen/metrics/collect.rb
 - lib/sqreen/metrics/sum.rb
 - lib/sqreen/metrics_store.rb
+- lib/sqreen/metrics_store/already_registered_metric.rb
+- lib/sqreen/metrics_store/unknown_metric.rb
+- lib/sqreen/metrics_store/unregistered_metric.rb
 - lib/sqreen/middleware.rb
 - lib/sqreen/mono_time.rb
+- lib/sqreen/node.rb
+- lib/sqreen/not_implemented_yet.rb
+- lib/sqreen/null_logger.rb
 - lib/sqreen/payload_creator.rb
+- lib/sqreen/payload_creator/header_section.rb
 - lib/sqreen/performance_notifications.rb
 - lib/sqreen/performance_notifications/binned_metrics.rb
 - lib/sqreen/performance_notifications/log.rb
 - lib/sqreen/performance_notifications/log_performance.rb
 - lib/sqreen/performance_notifications/metrics.rb
 - lib/sqreen/performance_notifications/newrelic.rb
+- lib/sqreen/prefix.rb
+- lib/sqreen/rails_middleware.rb
 - lib/sqreen/remote_command.rb
-- lib/sqreen/rule_attributes.rb
-- lib/sqreen/rule_callback.rb
+- lib/sqreen/remote_command/failure_output.rb
 - lib/sqreen/rules.rb
-- lib/sqreen/rules_callbacks.rb
-- lib/sqreen/rules_callbacks/binding_accessor_matcher.rb
-- lib/sqreen/rules_callbacks/binding_accessor_metrics.rb
-- lib/sqreen/rules_callbacks/blacklist_ips.rb
-- lib/sqreen/rules_callbacks/count_http_codes.rb
-- lib/sqreen/rules_callbacks/crawler_user_agent_matches.rb
-- lib/sqreen/rules_callbacks/crawler_user_agent_matches_metrics.rb
-- lib/sqreen/rules_callbacks/custom_error.rb
-- lib/sqreen/rules_callbacks/devise_auth_track.rb
-- lib/sqreen/rules_callbacks/devise_signup_track.rb
-- lib/sqreen/rules_callbacks/execjs.rb
-- lib/sqreen/rules_callbacks/headers_insert.rb
-- lib/sqreen/rules_callbacks/inspect_rule.rb
-- lib/sqreen/rules_callbacks/matcher_rule.rb
-- lib/sqreen/rules_callbacks/not_found.rb
-- lib/sqreen/rules_callbacks/rails_parameters.rb
-- lib/sqreen/rules_callbacks/record_request_context.rb
-- lib/sqreen/rules_callbacks/reflected_xss.rb
-- lib/sqreen/rules_callbacks/regexp_rule.rb
-- lib/sqreen/rules_callbacks/run_req_start_actions.rb
-- lib/sqreen/rules_callbacks/run_user_actions.rb
-- lib/sqreen/rules_callbacks/sdk_auth_track.rb
-- lib/sqreen/rules_callbacks/sdk_signup_track.rb
-- lib/sqreen/rules_callbacks/shell_env.rb
-- lib/sqreen/rules_callbacks/url_matches.rb
-- lib/sqreen/rules_callbacks/user_agent_matches.rb
-- lib/sqreen/rules_callbacks/waf.rb
-- lib/sqreen/rules_signature.rb
+- lib/sqreen/rules/attrs.rb
+- lib/sqreen/rules/auth_track_cb.rb
+- lib/sqreen/rules/binding_accessor_matcher_cb.rb
+- lib/sqreen/rules/binding_accessor_metrics.rb
+- lib/sqreen/rules/blacklist_ips_cb.rb
+- lib/sqreen/rules/count_http_codes.rb
+- lib/sqreen/rules/crawler_user_agent_matches_cb.rb
+- lib/sqreen/rules/crawler_user_agent_matches_metrics_cb.rb
+- lib/sqreen/rules/custom_error_cb.rb
+- lib/sqreen/rules/devise_auth_track_cb.rb
+- lib/sqreen/rules/devise_signup_track_cb.rb
+- lib/sqreen/rules/execjs_cb.rb
+- lib/sqreen/rules/headers_insert_cb.rb
+- lib/sqreen/rules/matcher_rule.rb
+- lib/sqreen/rules/not_found_cb.rb
+- lib/sqreen/rules/rails_parameters_cb.rb
+- lib/sqreen/rules/record_request_context.rb
+- lib/sqreen/rules/regexp_rule_cb.rb
+- lib/sqreen/rules/rule_cb.rb
+- lib/sqreen/rules/run_req_start_actions.rb
+- lib/sqreen/rules/run_user_actions.rb
+- lib/sqreen/rules/shell_env_cb.rb
+- lib/sqreen/rules/signup_track_cb.rb
+- lib/sqreen/rules/update_request_context.rb
+- lib/sqreen/rules/url_matches_cb.rb
+- lib/sqreen/rules/user_agent_matches_cb.rb
+- lib/sqreen/rules/waf_cb.rb
+- lib/sqreen/rules/xss_cb.rb
+- lib/sqreen/run_when_called_cb.rb
 - lib/sqreen/runner.rb
 - lib/sqreen/runtime_infos.rb
 - lib/sqreen/safe_json.rb
 - lib/sqreen/sdk.rb
+- lib/sqreen/sensitive_data_redactor.rb
 - lib/sqreen/serializer.rb
 - lib/sqreen/session.rb
 - lib/sqreen/shared_storage.rb
 - lib/sqreen/shared_storage23.rb
+- lib/sqreen/shrink_wrap.rb
+- lib/sqreen/signature_verifier.rb
+- lib/sqreen/sinatra_middleware.rb
+- lib/sqreen/sqreen_signed_verifier.rb
+- lib/sqreen/token_invalid_exception.rb
+- lib/sqreen/token_not_found_exception.rb
 - lib/sqreen/trie.rb
+- lib/sqreen/unauthorized.rb
+- lib/sqreen/util.rb
+- lib/sqreen/util/capped_array.rb
+- lib/sqreen/util/capped_hash.rb
+- lib/sqreen/util/capped_string.rb
+- lib/sqreen/util/capper.rb
 - lib/sqreen/version.rb
+- lib/sqreen/waf_error.rb
+- lib/sqreen/weave.rb
+- lib/sqreen/weave/hardcoded.rb
+- lib/sqreen/weave/instrumentor.rb
+- lib/sqreen/weave/legacy.rb
+- lib/sqreen/weave/legacy/instrumentation.rb
 - lib/sqreen/web_server.rb
 - lib/sqreen/web_server/generic.rb
 - lib/sqreen/web_server/passenger.rb

data/lib/sqreen/dependency/hook.rb

@@ -1,102 +0,0 @@
-# Copyright (c) 2015 Sqreen. All Rights Reserved.
-# Please refer to our terms for more information: https://www.sqreen.com/terms.html
-
-require 'sqreen/dependency/callback'
-require 'sqreen/dependency/hook_point'
-
-module Sqreen
-  module Dependency
-    class Hook
-      @hooks = {}
-
-      def self.[](hook_point)
-        @hooks[hook_point] ||= new(hook_point)
-      end
-
-      def self.add(hook_point, &block)
-        self[hook_point].add(&block)
-      end
-
-      attr_reader :point
-
-      def initialize(hook_point, dependency_test = nil)
-        @disabled = false
-        @point = hook_point.is_a?(HookPoint) ? hook_point : HookPoint.new(hook_point)
-        @before = []
-        @after  = []
-        @raised = []
-        @dependency_test = dependency_test || Proc.new { point.exist? }
-      end
-
-      def dependency?
-        @dependency_test.call if @dependency_test
-      end
-
-      def add(&block)
-        tap { instance_eval(&block) }
-      end
-
-      def callback_name(whence, tag = nil)
-        "#{point}@#{whence}" << (tag ? ":#{tag}" : "")
-      end
-
-      def before(tag = nil, &block)
-        return @before if block.nil?
-
-        @before << Callback.new(callback_name(:before, tag), &block)
-      end
-
-      def after(tag = nil, &block)
-        return @after if block.nil?
-
-        @after << Callback.new(callback_name(:after, tag), &block)
-      end
-
-      def raised(tag = nil, &block)
-        return @raised if block.nil?
-
-        @raised << Callback.new(callback_name(:raised, tag), &block)
-      end
-
-      def depends_on(&block)
-        @dependency_test = block
-      end
-
-      def enable
-        @disabled = false
-      end
-
-      def disable
-        @disabled = true
-      end
-
-      def disabled?
-        @disabled
-      end
-
-      def install
-        unless point.exist?
-          Sqreen.log.debug "[#{Process.pid}] #{point} not found"
-          return
-        end
-        Sqreen.log.debug "[#{Process.pid}] Hook #{point}: installing"
-
-        point.install('sqreen_hook', &Sqreen::Dependency::Hook.wrapper(self))
-      end
-
-      def self.wrapper(hook)
-        # pass self to cbs
-        Proc.new do |*args, &block|
-          Sqreen.log.debug "[#{Process.pid}] Hook #{hook.point} disabled:#{hook.disabled?} caller:#{Kernel.caller[1].inspect}"
-          hook.before.each { |c| c.call(c, self, args) } unless hook.disabled?
-          begin
-            hook.point.apply(self, 'sqreen_hook', *args, &block)
-          rescue ::Exception => e # rubocop:disable Lint/RescueException
-            hook.raised.each { |c| c.call(c, self, e, args) } unless hook.disabled?
-            raise
-          end.tap { |v| hook.after.each { |c| c.call(c, self, v, args) } unless hook.disabled? }
-        end
-      end
-    end
-  end
-end

data/lib/sqreen/rules_callbacks.rb

@@ -1,35 +0,0 @@
-# Copyright (c) 2015 Sqreen. All Rights Reserved.
-# Please refer to our terms for more information: https://www.sqreen.com/terms.html
-
-require 'sqreen/rules_callbacks/regexp_rule'
-require 'sqreen/rules_callbacks/matcher_rule'
-
-require 'sqreen/rules_callbacks/record_request_context'
-require 'sqreen/rules_callbacks/rails_parameters'
-
-require 'sqreen/rules_callbacks/headers_insert'
-require 'sqreen/rules_callbacks/blacklist_ips'
-
-require 'sqreen/rules_callbacks/inspect_rule'
-
-require 'sqreen/rules_callbacks/shell_env'
-
-require 'sqreen/rules_callbacks/url_matches'
-require 'sqreen/rules_callbacks/user_agent_matches'
-require 'sqreen/rules_callbacks/crawler_user_agent_matches'
-
-require 'sqreen/rules_callbacks/reflected_xss'
-require 'sqreen/rules_callbacks/execjs'
-
-require 'sqreen/rules_callbacks/binding_accessor_metrics'
-require 'sqreen/rules_callbacks/binding_accessor_matcher'
-require 'sqreen/rules_callbacks/count_http_codes'
-require 'sqreen/rules_callbacks/not_found'
-require 'sqreen/rules_callbacks/crawler_user_agent_matches_metrics'
-require 'sqreen/rules_callbacks/sdk_auth_track'
-require 'sqreen/rules_callbacks/sdk_signup_track'
-require 'sqreen/rules_callbacks/devise_auth_track'
-require 'sqreen/rules_callbacks/devise_signup_track'
-
-require 'sqreen/rules_callbacks/custom_error'
-require 'sqreen/rules_callbacks/waf'

data/lib/sqreen/rules_callbacks/inspect_rule.rb

@@ -1,25 +0,0 @@
-# Copyright (c) 2015 Sqreen. All Rights Reserved.
-# Please refer to our terms for more information: https://www.sqreen.com/terms.html
-
-require 'sqreen/rule_callback'
-
-module Sqreen
-  module Rules
-    class InspectRuleCB < RuleCB
-      def pre(_inst, args, _budget = nil, &_block)
-        Sqreen.log.debug { "<< #{@klass} #{@method} #{Thread.current}" }
-        Sqreen.log.debug { args.map(&:inspect).join(' ') }
-      end
-
-      def post(rv, _inst, _args, _budget = nil, &_block)
-        Sqreen.log.debug { ">> #{rv.inspect} #{@klass} #{@method} #{Thread.current}" }
-        byebug if defined? byebug && @data.is_a?(Hash) && @data[:break] == 1
-      end
-
-      def failing(rv, _inst, _args, _budget = nil, &_block)
-        Sqreen.log.debug { "># #{rv.inspect} #{@klass} #{@method} #{Thread.current}" }
-        byebug if defined? byebug && @data.is_a?(Hash) && @data[:break] == 1
-      end
-    end
-  end
-end