sqreen 1.18.3 → 1.18.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f332381788705ff90de8cf2f0b3955ace893140821e77ba7cb4d07c2f1e0c06f
-  data.tar.gz: 8553b7fc6cfc0f363599518b95ca78142ec21b6c85d34c68b106129a196f3a68
+  metadata.gz: c45fb1ef0cc0144c31a590a99efd24dc36224425e3eaa03702d7f04337437c80
+  data.tar.gz: 6d0c44ddafa3547a74ffdbd1123d9f17d33a54699203baa7f4cbec91a3fd5bc3
 SHA512:
-  metadata.gz: 35640b7a9a1bcebec2db55feaf2df1b79ed0cba99c1f39b3427a8383b25bf4f61172ca71ba9700eb37c85f9194467179913fb690beb8bec0e7db0a5426258f7c
-  data.tar.gz: fca777b7585ed34bcd8a9f8c4a0f4708b0ece8e0a9c81bdbb2c33f9bc3814b09027462af6697c4578f5751b77be8822df5c075ef5e5ead082ee656f10c743e87
+  metadata.gz: b6104a3ec75fce7d9e4bfc5c75a106f536dcaa103c7350560713aae37820baead05d81f037d56133a5913620004f46611addf61bfe76a4868ac9407ba5b5d56f
+  data.tar.gz: f11adaa346fe2296289483c7d958a9ab7f67aebd01a22c8848f77fbb0d79dec2f9088f346d30a712472b2d4e783ea3cc7da66cb4944341419434bb4ef363ca99

data/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 1.18.4
+
+* Fix instrumentation conflict when a class defines a send method
+* Fix compatibility with Sorbet type checker
+* Improve WAF time budget handling
+
 ## 1.18.3
 
 * Improve PII protection

data/lib/sqreen.rb

@@ -1,3 +1,5 @@
+# typed: ignore
+
 # Copyright (c) 2015 Sqreen. All Rights Reserved.
 # Please refer to our terms for more information: https://www.sqreen.com/terms.html
 

data/lib/sqreen/instrumentation.rb

@@ -237,7 +237,7 @@ module Sqreen
       key = [method]
       args.each { |e| key.push(e.object_id) }
       if key && @sqreen_multi_instr && @sqreen_multi_instr[instance.object_id].member?(key)
-        return instance.send(original_method, *args, &block)
+        return instance.__send__(original_method, *args, &block)
       end
       @sqreen_multi_instr ||= Hash.new { |h, k| h[k] = Set.new } # TODO: this should probably be a thread local
       @sqreen_multi_instr[instance.object_id].add(key)
@@ -273,7 +273,7 @@ module Sqreen
           skip_call = true
         end
         # If we are already overbudget let's not work at all
-        return send(original_meth, *args, &block) if skip_call
+        return __send__(original_meth, *args, &block) if skip_call
         Instrumentation.guard_multi_call(self, meth, original_meth, args, block) do
           precbs, postcbs, failcbs = Instrumentation.callbacks.get(klass_name, meth)
           Thread.current[:sqreen_in_use] = true
@@ -328,7 +328,7 @@ module Sqreen
           Thread.current[:sqreen_in_use] = false
           return result if skip
           begin
-            result = send(original_meth, *args, &block)
+            result = __send__(original_meth, *args, &block)
           rescue StandardError => e
             Thread.current[:sqreen_in_use] = true
             budget = Sqreen.performance_budget && framework && framework.remaining_perf_budget
@@ -401,7 +401,7 @@ module Sqreen
         Sqreen::PerformanceNotifications::BinnedMetrics.start_request if has_notifications
 
         begin
-          send(original_meth, *args, &block)
+          __send__(original_meth, *args, &block)
         ensure
           if has_notifications
             Sqreen::PerformanceNotifications.instrument('next_req_notifs', PRE_CB) do
@@ -437,7 +437,7 @@ module Sqreen
         end
 
         alias_method original, new_method
-        send(method_kind, original)
+        __send__(method_kind, original)
         private saved_meth_name
       end
     end
@@ -456,7 +456,7 @@ module Sqreen
           method_kind = :private
         end
         alias_method meth, saved_meth_name
-        send(method_kind, meth)
+        __send__(method_kind, meth)
 
         remove_method saved_meth_name
       end
@@ -503,7 +503,7 @@ module Sqreen
         alias_method meth, new_method
         private saved_meth_name
         private new_method
-        send(method_kind, meth)
+        __send__(method_kind, meth)
       end
       saved_meth_name
     end
@@ -522,7 +522,7 @@ module Sqreen
           method_kind = :private
         end
         alias_method meth.to_sym, saved_meth_name.to_sym
-        send(method_kind, meth.to_sym)
+        __send__(method_kind, meth.to_sym)
       end
     end
 

data/lib/sqreen/rules/waf_cb.rb

@@ -57,7 +57,7 @@ module Sqreen
         ObjectSpace.define_finalizer(self, WAFCB.finalizer(@waf_rule_name.dup))
       end
 
-      def pre(instance, args, _budget)
+      def pre(instance, args, budget)
         return unless WAFCB.libsqreen? && WAFCB.waf?
 
         request = framework.request
@@ -70,6 +70,7 @@ module Sqreen
           h[e] = capper.call(b.resolve(*env))
         end
         waf_args = Sqreen::EncodingSanitizer.sanitize(waf_args)
+        budget = [self.budget, budget].compact.min
         action, data = ::LibSqreen::WAF.run(waf_rule_name, waf_args, budget)
 
         case action

data/lib/sqreen/version.rb

@@ -2,5 +2,5 @@
 # Please refer to our terms for more information: https://www.sqreen.com/terms.html
 
 module Sqreen
-  VERSION = '1.18.3'.freeze
+  VERSION = '1.18.4'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sqreen
 version: !ruby/object:Gem::Version
-  version: 1.18.3
+  version: 1.18.4
 platform: ruby
 authors:
 - Sqreen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-12-19 00:00:00.000000000 Z
+date: 2020-02-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: sq_mini_racer