uri_config 0.0.5 → 0.0.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 74885d68caeccf82e952a6ce398a5f7654fa786c
-  data.tar.gz: 09f483f9adfa600fff414cc4d84c3387dd2cc303
+  metadata.gz: 7b373ef2d82a823bb1ffe17b6536a101dc5be818
+  data.tar.gz: 60a858ef26e839112539a3e629d96f68f8c3ca08
 SHA512:
-  metadata.gz: ea85a00459641c82c88d5c812465cc1d3a7bc47e5e31a78cbf840ff580b78d4200ec30d8ae5e4b793f9f1ffebc99d7c25e015c1778a234b4579e63f456efd156
-  data.tar.gz: 6a8ad50258942d0fdcd9ae183e5419f5020cc72d4dc6788fa45b802d02ac2d175906d97b3e2a3142ad03d4f8dadda667deff5c5206e4ef8bcab13852d026e8c1
+  metadata.gz: fc39c5668d40398dedcf374c9612704240bffaf1e6924d16119f528c5c21896a58eae8f05a653eeda4a2543cf9b6178e0ae39436b59b9e66b858de154676c46e
+  data.tar.gz: a15c824f2a28cfb898435445640f64107315e0d323b0ed51e0f02b9e80c5ed11b084bb4c30d9ef2d032ef91888dbbe582c1f307b024a955ba7f7a91e1dcd76fc

data/lib/uri_config/config.rb

@@ -81,6 +81,9 @@ module URIConfig
 
     def uri
       @uri ||= URI.parse url
+    rescue => e
+      e.message.gsub!(url, "<URL_SUPPRESSED>")
+      raise e
     end
   end
 end

data/lib/uri_config/version.rb

@@ -1,3 +1,3 @@
 module URIConfig
-  VERSION = "0.0.5"
+  VERSION = "0.0.6"
 end

data/spec/config_spec.rb

@@ -56,7 +56,7 @@ module URIConfig
 
         specify do
           expect(
-            URIConfig::Config.values_from("TEST_URL", :username, :password)
+            URIConfig::Config.values_from("TEST_URL", :username, :password),
           ).to eq(%w(user pass))
         end
       end
@@ -87,5 +87,14 @@ module URIConfig
         end
       end
     end
+
+    # This behaviour will make it ... difficult to troubleshoot
+    it "should not leak secrets on error" do
+      url = "https://USER:secret@foo.bar.com@foo.bar.com/"
+
+      expect do
+        URIConfig::Config.new(url).password
+      end.to raise_error("bad URI(is not URI?): <URL_SUPPRESSED>")
+    end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: uri_config
 version: !ruby/object:Gem::Version
-  version: 0.0.5
+  version: 0.0.6
 platform: ruby
 authors:
 - Jonathon M. Abbott
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-02-05 00:00:00.000000000 Z
+date: 2015-04-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler