sqreen 1.18.3.beta2 → 1.18.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1a1340b0e4265b69cea5bb84456f52586f310ccc03aadd9d6974779707d55329
-  data.tar.gz: 4da37a0e4bd305d18fc06d164683f46dddf830c54a67c3a3f3481a6314efbc34
+  metadata.gz: f332381788705ff90de8cf2f0b3955ace893140821e77ba7cb4d07c2f1e0c06f
+  data.tar.gz: 8553b7fc6cfc0f363599518b95ca78142ec21b6c85d34c68b106129a196f3a68
 SHA512:
-  metadata.gz: 662b2f798f20452c4a8cd328608277f68748584e2e335a9e2f4cc5a3acdc97fd5345136048f23813c76dee8974a0ae1e62bb2018b97b0d2bbe729d31603fbfec
-  data.tar.gz: 9f4d4c1efad12ed3831dedb528a677d1cf92bb7a0c3c7a07c21c26b5838a5081e2b3a8944bfb3a89c80b6f80f09c9cb676af23839c401187702038aae014c8cf
+  metadata.gz: 35640b7a9a1bcebec2db55feaf2df1b79ed0cba99c1f39b3427a8383b25bf4f61172ca71ba9700eb37c85f9194467179913fb690beb8bec0e7db0a5426258f7c
+  data.tar.gz: fca777b7585ed34bcd8a9f8c4a0f4708b0ece8e0a9c81bdbb2c33f9bc3814b09027462af6697c4578f5751b77be8822df5c075ef5e5ead082ee656f10c743e87

data/CHANGELOG.md

@@ -1,3 +1,14 @@
+## 1.18.3
+
+* Improve PII protection
+* Improve performance on sizeable request payloads
+* Improve handling of Rails without a database
+* Improve compatibility with Rack and Sinatra middlewares
+* Support JSON payloads with rack-contrib PostBodyContentParser
+* Add libsqreen toggle to configuration
+* Prepare for Ruby 2.7 support
+* Include license file in gem
+
 ## 1.18.2
 
 * Improve internal WAF error reporting

data/LICENSE

@@ -0,0 +1,3 @@
+Sqreen for Ruby is free-to-use, proprietary software.
+
+Please refer to our terms for more information: https://www.sqreen.com/terms.html

data/lib/sqreen/configuration.rb

@@ -34,6 +34,8 @@ module Sqreen
   CONFIG_DESCRIPTION = [
     { :env => :SQREEN_DISABLE, :name => :disable,
       :default => false, :convert => :to_bool },
+    { :env => :SQREEN_LIBSQREEN, :name => :libsqreen,
+      :default => true, :convert => :to_bool },
     { :env => :SQREEN_URL,       :name => :url,
       :default => 'https://back.sqreen.io' },
     { :env => :SQREEN_TOKEN,     :name => :token,

data/lib/sqreen/dependency/libsqreen.rb

@@ -0,0 +1,28 @@
+# Copyright (c) 2015 Sqreen. All Rights Reserved.
+# Please refer to our terms for more information: https://www.sqreen.com/terms.html
+
+module Sqreen
+  module Dependency
+    module LibSqreen
+      module_function
+
+      def require_libsqreen
+        raise LoadError, 'libsqreen forcefully disabled by configuration' unless Sqreen.config_get('libsqreen')
+        require 'libsqreen'
+        @libsqreen = true
+      rescue LoadError => e
+        Sqreen.log.warn("libsqreen gem not required: #{e.message}")
+        @libsqreen = false
+      end
+
+      def required?
+        require_libsqreen if @libsqreen.nil?
+        Sqreen::Dependency.const_exist?('LibSqreen')
+      end
+
+      def stub?
+        !::LibSqreen.respond_to?(:version)
+      end
+    end
+  end
+end

data/lib/sqreen/rules/waf_cb.rb

@@ -8,23 +8,15 @@ require 'sqreen/rules/rule_cb'
 require 'sqreen/safe_json'
 require 'sqreen/exception'
 require 'sqreen/util/capper'
+require 'sqreen/dependency/libsqreen'
 
 module Sqreen
   module Rules
     class WAFCB < RuleCB
       BUDGET_MAX = 5000
 
-      # TODO: move to Dependency
-      begin
-        require 'libsqreen'
-        @libsqreen = true
-      rescue LoadError
-        Sqreen.log.warn('libsqreen gem not found')
-        @libsqreen = false
-      end
-
       def self.libsqreen?
-        @libsqreen
+        Sqreen::Dependency::LibSqreen.required?
       end
 
       def self.waf?
@@ -38,7 +30,7 @@ module Sqreen
         @overtimeable = false
 
         unless WAFCB.libsqreen? && WAFCB.waf?
-          Sqreen.log.warn('libsqreen gem not found')
+          Sqreen.log.warn('libsqreen gem with waf not found')
           return
         end
 

data/lib/sqreen/runtime_infos.rb

@@ -3,6 +3,7 @@
 
 require 'sqreen/version'
 require 'sqreen/frameworks'
+require 'sqreen/dependency/libsqreen'
 
 require 'socket'
 require 'digest/sha1'
@@ -71,15 +72,7 @@ module Sqreen
     end
 
     def libsqreen?
-      libsqreen_loaded? && !libsqreen_stub?
-    end
-
-    def libsqreen_loaded?
-      Kernel.const_defined?('LibSqreen')
-    end
-
-    def libsqreen_stub?
-      !::LibSqreen.respond_to?(:version)
+      Sqreen::Dependency::LibSqreen.required? && !Sqreen::Dependency::LibSqreen.stub?
     end
 
     def libsqreen_version

data/lib/sqreen/util/capped_array.rb

@@ -6,7 +6,10 @@ require 'sqreen/util'
 class Sqreen::Util::CappedArray < Array
   attr_reader :size_cap, :depth_cap
 
-  def initialize(*args, size_cap: 150, depth_cap: 10, &block)
+  def initialize(*args, &block)
+    opts = args.last.is_a?(Hash) ? args.pop : {}
+    size_cap = opts[:size_cap] || 150
+    depth_cap = opts[:depth_cap] || 10
     @size_cap = size_cap
     @depth_cap = depth_cap
 

data/lib/sqreen/util/capped_hash.rb

@@ -6,7 +6,10 @@ require 'sqreen/util'
 class Sqreen::Util::CappedHash < Hash
   attr_reader :size_cap, :depth_cap
 
-  def initialize(*args, size_cap: 150, depth_cap: 10, &block)
+  def initialize(*args, &block)
+    opts = args.last.is_a?(Hash) ? args.pop : {}
+    size_cap = opts[:size_cap] || 150
+    depth_cap = opts[:depth_cap] || 10
     @size_cap = size_cap
     @depth_cap = depth_cap
 

data/lib/sqreen/util/capped_string.rb

@@ -6,7 +6,9 @@ require 'sqreen/util'
 class Sqreen::Util::CappedString < String
   attr_reader :size_cap
 
-  def initialize(*args, size_cap: 4096, &block)
+  def initialize(*args, &block)
+    opts = args.last.is_a?(Hash) ? args.pop : {}
+    size_cap = opts[:size_cap] || 4096
     @size_cap = size_cap
     super(*args, &block)
   end

data/lib/sqreen/util/capper.rb

@@ -9,7 +9,12 @@ require 'sqreen/util/capped_array'
 class Sqreen::Util::Capper
   attr_reader :string_size_cap, :size_cap, :depth_cap
 
-  def initialize(string_size_cap: 4096, size_cap: 150, depth_cap: 10, flat_size_cap: 10000)
+  def initialize(opts = {})
+    string_size_cap = opts[:string_size_cap] || 4096
+    size_cap = opts[:size_cap] || 150
+    depth_cap = opts[:depth_cap] || 10
+    flat_size_cap = opts[:flat_size_cap] || 10000
+
     @string_size_cap = string_size_cap
     @size_cap = size_cap
     @depth_cap = depth_cap
@@ -22,7 +27,10 @@ class Sqreen::Util::Capper
 
   private
 
-  def r_call(e, size: @flat_size_cap, depth: @depth_cap)
+  def r_call(e, opts = {})
+    size = opts[:size] || @flat_size_cap
+    depth = opts[:depth] || @depth_cap
+
     case e
     when Hash
       h = Sqreen::Util::CappedHash.new(size_cap: size_cap, depth_cap: depth)

data/lib/sqreen/version.rb

@@ -2,5 +2,5 @@
 # Please refer to our terms for more information: https://www.sqreen.com/terms.html
 
 module Sqreen
-  VERSION = '1.18.3.beta2'.freeze
+  VERSION = '1.18.3'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sqreen
 version: !ruby/object:Gem::Version
-  version: 1.18.3.beta2
+  version: 1.18.3
 platform: ruby
 authors:
 - Sqreen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-12-18 00:00:00.000000000 Z
+date: 2019-12-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: sq_mini_racer
@@ -47,6 +47,7 @@ extra_rdoc_files: []
 files:
 - CHANGELOG.md
 - CODE_OF_CONDUCT.md
+- LICENSE
 - README.md
 - Rakefile
 - lib/sqreen.rb
@@ -88,6 +89,7 @@ files:
 - lib/sqreen/dependency/detector.rb
 - lib/sqreen/dependency/hook.rb
 - lib/sqreen/dependency/hook_point.rb
+- lib/sqreen/dependency/libsqreen.rb
 - lib/sqreen/dependency/new_relic.rb
 - lib/sqreen/dependency/rack.rb
 - lib/sqreen/dependency/rails.rb
@@ -217,9 +219,7 @@ homepage: https://www.sqreen.com/
 licenses:
 - Sqreen
 metadata: {}
-post_install_message: |2
-      This is a Sqreen beta release and may not work in all situations.
-      Make sure to review CHANGELOG.md for important details.
+post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -230,11 +230,12 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 1.9.3
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
-rubygems_version: 3.0.3
+rubyforge_project: 
+rubygems_version: 2.7.7
 signing_key: 
 specification_version: 4
 summary: Sqreen Ruby agent