sqreen 1.18.5 → 1.18.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 321074d4cc69c79e906d6b4a865e49a36a22f786201a8def57d48d1164716282
-  data.tar.gz: 1edd7b85daa4ef20b624d0ff2ee16178b4cfe14d948c065cceba7374f1ad41d2
+  metadata.gz: a4b8ec01ad0365518711b01aa8a424f179f2d115d614da821b212cbb82e8754e
+  data.tar.gz: 96c2e3da8c0678ba9720d613db4edf828af3559a36862bca313dab9dcd7c181a
 SHA512:
-  metadata.gz: '0085800cf5856cdab2003506d1fad265b1bb5744cf80063e4e380af44a5cc4d49a6bca7a2e6199882cea7d296511089ae1c8c2155c4e04840795afb5bbcd6817'
-  data.tar.gz: f1f2dc1680ec65f9cfd8cefde2c47fae7bbf0300f9c2d18811a21b0d1e6ac01abb0679027ce69b5faf322975ab5d17afd92c05a6bc85cf2459fc514f385e0bbc
+  metadata.gz: a7cdd3a299af7569fdab2e5cad439e5eedd6de6cdd80d474703408e64b325ae70f4837d4326c4e28a93e658b9c3c15c4279821ad1e0e0e91252faa7ff33e9c1b
+  data.tar.gz: '0691dc3e4aa7650c4fd2a4be33cf5f32843b062b4932fed4711866208011dccd3920f7dda468e4d25555e4b97a7e9ce8a41820cccacd1e473f29f26d2704b25b'

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.18.6
+
+* Improve default WAF time budget handling logic
+
 ## 1.18.5
 
 * Fix type mismatch in WAF time budget handling

data/lib/sqreen/rules/waf_cb.rb

@@ -52,7 +52,8 @@ module Sqreen
         @binding_accessors = @data['values'].fetch('binding_accessors', []).each_with_object({}) do |e, h|
           h[e] = BindingAccessor.new(e)
         end
-        @budget = @data['values'].fetch('budget_in_ms', BUDGET_MAX) * 1000
+        @budget = (@data['values'].fetch('budget_in_ms', nil) || BUDGET_MAX) * 1000
+        Sqreen.log.debug("WAF budget for #{@waf_rule_name} set to #{@budget}us")
 
         ObjectSpace.define_finalizer(self, WAFCB.finalizer(@waf_rule_name.dup))
       end
@@ -70,7 +71,7 @@ module Sqreen
           h[e] = capper.call(b.resolve(*env))
         end
         waf_args = Sqreen::EncodingSanitizer.sanitize(waf_args)
-        waf_budget = [self.budget, budget * 1_000_000].compact.min.to_i
+        waf_budget = [self.budget, budget && budget * 1_000_000].compact.min.to_i
         action, data = ::LibSqreen::WAF.run(waf_rule_name, waf_args, waf_budget)
 
         case action

data/lib/sqreen/version.rb

@@ -2,5 +2,5 @@
 # Please refer to our terms for more information: https://www.sqreen.com/terms.html
 
 module Sqreen
-  VERSION = '1.18.5'.freeze
+  VERSION = '1.18.6'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sqreen
 version: !ruby/object:Gem::Version
-  version: 1.18.5
+  version: 1.18.6
 platform: ruby
 authors:
 - Sqreen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-02-11 00:00:00.000000000 Z
+date: 2020-02-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: sq_mini_racer