sqreen 1.18.5-java → 1.18.6-java

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: eb507312dca29a9446f8bce75d8b150c709e453efc0d09757f2637cb0b486771
-  data.tar.gz: 3138b8a6a57d9330e97767161003f9861409b1e30deaa140828456684a25d096
+  metadata.gz: a3e35cc01e7532fdc2de3b453ec1dd4737c408ffc63186b36a15e87233e95a1d
+  data.tar.gz: 4926e2f50f1ab393372e54771d3f507d7a0423b81eaf24082fa899292bd40ae6
 SHA512:
-  metadata.gz: 1afa452809625ca8739de597abd0b714e5dc27682f365bc24e3a67c0319288321e13875f2b9a623ece2798e377ff7852938208bf7144c2f43726c731cc9b08bb
-  data.tar.gz: 4204ba1c27317034ff4ab051831bd36e3ab174dce731113242ca4fe2e405b2aedcf083e0dccd702302e09da4fc1277d5319c8195073ee5635c019b145638a842
+  metadata.gz: 2af302eb9db7834083e0d71967ca9777e8b2283ab7b39d44426696ae029a97c34e88d54182d0082ffb479f37426e89d9418e41c2e0c89dbc56375353c69296e6
+  data.tar.gz: bbd4764c0192e2f8ae8e84bb6737459ac0c84934187d1537071defd6a68cdd510e118f2328e870c02be777785d85fab37ecfe8292bd240e3a5a176640457ad8d

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.18.6
+
+* Improve default WAF time budget handling logic
+
 ## 1.18.5
 
 * Fix type mismatch in WAF time budget handling

data/lib/sqreen/rules/waf_cb.rb

@@ -52,7 +52,8 @@ module Sqreen
         @binding_accessors = @data['values'].fetch('binding_accessors', []).each_with_object({}) do |e, h|
           h[e] = BindingAccessor.new(e)
         end
-        @budget = @data['values'].fetch('budget_in_ms', BUDGET_MAX) * 1000
+        @budget = (@data['values'].fetch('budget_in_ms', nil) || BUDGET_MAX) * 1000
+        Sqreen.log.debug("WAF budget for #{@waf_rule_name} set to #{@budget}us")
 
         ObjectSpace.define_finalizer(self, WAFCB.finalizer(@waf_rule_name.dup))
       end
@@ -70,7 +71,7 @@ module Sqreen
           h[e] = capper.call(b.resolve(*env))
         end
         waf_args = Sqreen::EncodingSanitizer.sanitize(waf_args)
-        waf_budget = [self.budget, budget * 1_000_000].compact.min.to_i
+        waf_budget = [self.budget, budget && budget * 1_000_000].compact.min.to_i
         action, data = ::LibSqreen::WAF.run(waf_rule_name, waf_args, waf_budget)
 
         case action

data/lib/sqreen/version.rb

@@ -2,5 +2,5 @@
 # Please refer to our terms for more information: https://www.sqreen.com/terms.html
 
 module Sqreen
-  VERSION = '1.18.5'.freeze
+  VERSION = '1.18.6'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sqreen
 version: !ruby/object:Gem::Version
-  version: 1.18.5
+  version: 1.18.6
 platform: java
 authors:
 - Sqreen
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2020-02-11 00:00:00.000000000 Z
+date: 2020-02-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement