sqreen 1.20.2 → 1.20.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 20f83c83a19022c3bfba53af705716e2d4b4d791912bf32c6e7e2853496a4b05
4
- data.tar.gz: 6592f5a6c88895016924c4a342d6c1f48f885527c18fc0b182495d2905cef926
3
+ metadata.gz: 4bdcf1837e4c2ea45300af52682c98574d0c007703b507a469aeced98088bbda
4
+ data.tar.gz: df2416f673ff51cf73b4056da0148738eb0f162bc054fba7480ce2d8ca05ea49
5
5
  SHA512:
6
- metadata.gz: 349fecb7524cb1740965162e596708fede99c5ab12bd5ed0a009c324e360585a15f2237c78614b666e77d5bbbf5b044a9a1ee7be8d3ce791b377cbc1ecbe15aa
7
- data.tar.gz: ad4b8725a6531e80a4e47aac8c820f88284391a8f674ae59e8908846714c8b1c76be7fd95034cdf4885588f39e413308f39cc5688f6ed207558b48d0b14def5f
6
+ metadata.gz: bc5df95d6ddff6c1a45b469dc42a0d18b17a804d0fbeb3689361db8583ad421b3ed1a9b823ec24b88f3494f5192865bd1f4c4dfde28c61fdf15d1fa4d06603bc
7
+ data.tar.gz: 16980a1f0934e7f29251d0c72d751108ddf033c15f7860bd9f63a66b1ff6a5bc367f99d64faef3955015248ee16df882b44db2040f8e4aa84054a82c1ea18397
@@ -1,3 +1,7 @@
1
+ ## 1.20.3
2
+
3
+ * Fix signature check
4
+
1
5
  ## 1.20.2
2
6
 
3
7
  * Fix performance regression in instrumentation engine
@@ -4,5 +4,5 @@
4
4
  # Please refer to our terms for more information: https://www.sqreen.com/terms.html
5
5
 
6
6
  module Sqreen
7
- VERSION = '1.20.2'.freeze
7
+ VERSION = '1.20.3'.freeze
8
8
  end
@@ -8,6 +8,7 @@ require 'sqreen/graft/hook_point'
8
8
  require 'sqreen/call_countable'
9
9
  require 'sqreen/rules'
10
10
  require 'sqreen/rules/record_request_context'
11
+ require 'sqreen/sqreen_signed_verifier'
11
12
 
12
13
  class Sqreen::Weave::Legacy::Instrumentation
13
14
  attr_accessor :metrics_engine
@@ -105,6 +106,15 @@ class Sqreen::Weave::Legacy::Instrumentation
105
106
 
106
107
  ### set up rule signature verifier
107
108
  verifier = nil
109
+ if Sqreen.features['rules_signature'] &&
110
+ Sqreen.config_get(:rules_verify_signature) == true &&
111
+ !defined?(::JRUBY_VERSION)
112
+ verifier = Sqreen::SqreenSignedVerifier.new
113
+ Sqreen::Weave.logger.debug('Rules signature enabled')
114
+ else
115
+ Sqreen::Weave.logger.debug('Rules signature disabled')
116
+ end
117
+
108
118
  ### force clean instrumentation callback list
109
119
  @hooks = []
110
120
  ### for each rule description
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: sqreen
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.20.2
4
+ version: 1.20.3
5
5
  platform: ruby
6
6
  authors:
7
7
  - Sqreen
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2020-07-23 00:00:00.000000000 Z
11
+ date: 2020-07-30 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: sqreen-backport