wovnrb 3.13.0 → 3.13.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c25c86e04efab85fc760c24f2fb1905e2cb95a8636b2ad27a9f59bbef78e99e5
-  data.tar.gz: ab246aa58e1cb9ed5989f262ac8144eac400c77b556a5d9fb259e62534b9bac5
+  metadata.gz: a2bdf648db98d590ad2f2c05db1373552996dd9e3c942951f78097b3b6debd6c
+  data.tar.gz: 1036495c61840b5027f25d4b68c07a50682b4e84c7f78898cb3a9c2c0ad6a876
 SHA512:
-  metadata.gz: b5f42f8edb1b03dc3fe14d513aac9dffc97df0b62b9186fabba98b60373335579be893eddd4305c3e6cdbea9c9798e758fc73ceb8077f0f044efb36b0b6fb17c
-  data.tar.gz: 48431e3fba479475e39ed4a5a0f77ca2e53e8ecc4e474ae27166a613e62da176069c40e90349b2fd2764c3d6f66577651ba7b8eded732ccf23cdbb82fb6886bd
+  metadata.gz: a88cbd3f984eb1c32cd3f2c8588e0e697562f4c5a42e82fd62a1d91b76e4b8b58436a447d56aecf267b13cebabde0ca46b5c17bdecd1b49f27d0901c5af09d2a
+  data.tar.gz: bd575bcb78e7f3c3fa98480c1b627b78515b5bf8181de8c6d7907dbcac349d0fefdf34662849e19452aed784ebcb503a67090602df24b26a07c929ce4bc261b7

data/README.md

@@ -1 +1 @@
-README.ja.md
+./README.ja.md

data/lib/wovnrb/headers.rb

@@ -14,7 +14,7 @@ module Wovnrb
       @settings = settings
       @protocol = request.scheme
       @unmasked_host = if settings['use_proxy'] && @env.key?('HTTP_X_FORWARDED_HOST')
-                         @env['HTTP_X_FORWARDED_HOST']
+                         first_header_value(@env['HTTP_X_FORWARDED_HOST'])
                        else
                          @env['HTTP_HOST']
                        end
@@ -29,7 +29,7 @@ module Wovnrb
       @unmasked_pathname += '/' unless @unmasked_pathname =~ /\/$/ || @unmasked_pathname =~ /\/[^\/.]+\.[^\/.]+$/
       @unmasked_url = "#{@protocol}://#{@unmasked_host}#{@unmasked_pathname}"
       @host = if settings['use_proxy'] && @env.key?('HTTP_X_FORWARDED_HOST')
-                @env['HTTP_X_FORWARDED_HOST']
+                first_header_value(@env['HTTP_X_FORWARDED_HOST'])
               else
                 @env['HTTP_HOST']
               end
@@ -81,7 +81,7 @@ module Wovnrb
     def url_language
       if @url_language.nil?
         full_url = if @settings['use_proxy'] && @env.key?('HTTP_X_FORWARDED_HOST')
-                     "#{@env['HTTP_X_FORWARDED_HOST']}#{@env['REQUEST_URI']}"
+                     "#{first_header_value(@env['HTTP_X_FORWARDED_HOST'])}#{@env['REQUEST_URI']}"
                    else
                      "#{@env['SERVER_NAME']}#{@env['REQUEST_URI']}"
                    end
@@ -173,7 +173,7 @@ module Wovnrb
 
     def remove_lang_from_host
       if @settings['use_proxy'] && @env.key?('HTTP_X_FORWARDED_HOST')
-        @env['HTTP_X_FORWARDED_HOST'] = @url_lang_switcher.remove_lang_from_uri_component(@env['HTTP_X_FORWARDED_HOST'], lang_code, self)
+        @env['HTTP_X_FORWARDED_HOST'] = @url_lang_switcher.remove_lang_from_uri_component(first_header_value(@env['HTTP_X_FORWARDED_HOST']), lang_code, self)
       else
         @env['HTTP_HOST'] = @url_lang_switcher.remove_lang_from_uri_component(@env['HTTP_HOST'], lang_code, self)
         @env['SERVER_NAME'] = @url_lang_switcher.remove_lang_from_uri_component(@env['SERVER_NAME'], lang_code, self)
@@ -188,5 +188,11 @@ module Wovnrb
       @env['ORIGINAL_FULLPATH'] = @url_lang_switcher.remove_lang_from_uri_component(@env['ORIGINAL_FULLPATH'], lang_code, self) if @env.key?('ORIGINAL_FULLPATH')
       @env['HTTP_REFERER'] = @url_lang_switcher.remove_lang_from_uri_component(@env['HTTP_REFERER'], lang_code, self) if @env.key?('HTTP_REFERER')
     end
+
+    # X-Forwarded-Host can contain multiple comma-separated values when
+    # the request passes through more than one proxy (RFC 7230 §3.2.2).
+    def first_header_value(value)
+      value.include?(',') ? value.split(',', 2).first.strip : value
+    end
   end
 end

data/lib/wovnrb/version.rb

@@ -1,3 +1,3 @@
 module Wovnrb
-  VERSION = '3.13.0'.freeze
+  VERSION = '3.13.1'.freeze
 end

data/test/lib/headers_test.rb

@@ -947,5 +947,81 @@ module Wovnrb
         assert_equal(expected_lang_code, header.url_language)
       end
     end
+
+    def test_multi_value_x_forwarded_host_uses_first_value
+      settings = Wovnrb.get_settings({ 'use_proxy' => true })
+      store = Wovnrb.get_store(settings)
+      env = Wovnrb.get_env({
+                             'HTTP_X_FORWARDED_HOST' => 'www.example.com, www.example.com',
+                             'REQUEST_URI' => '/en/page'
+                           })
+      url_lang_switcher = UrlLanguageSwitcher.new(store)
+      header = Wovnrb::Headers.new(env, settings, url_lang_switcher)
+
+      assert_equal('www.example.com', header.unmasked_host)
+      assert_equal('www.example.com', header.host)
+    end
+
+    def test_multi_value_x_forwarded_host_with_spaces
+      settings = Wovnrb.get_settings({ 'use_proxy' => true })
+      store = Wovnrb.get_store(settings)
+      env = Wovnrb.get_env({
+                             'HTTP_X_FORWARDED_HOST' => '  www.example.com , proxy.internal ',
+                             'REQUEST_URI' => '/page'
+                           })
+      url_lang_switcher = UrlLanguageSwitcher.new(store)
+      header = Wovnrb::Headers.new(env, settings, url_lang_switcher)
+
+      assert_equal('www.example.com', header.unmasked_host)
+    end
+
+    def test_single_value_x_forwarded_host_unchanged
+      settings = Wovnrb.get_settings({ 'use_proxy' => true })
+      store = Wovnrb.get_store(settings)
+      env = Wovnrb.get_env({
+                             'HTTP_X_FORWARDED_HOST' => 'www.example.com',
+                             'REQUEST_URI' => '/page'
+                           })
+      url_lang_switcher = UrlLanguageSwitcher.new(store)
+      header = Wovnrb::Headers.new(env, settings, url_lang_switcher)
+
+      assert_equal('www.example.com', header.unmasked_host)
+      assert_equal('www.example.com', header.host)
+    end
+
+    def test_multi_value_x_forwarded_host_subdomain_url_language
+      settings = Wovnrb.get_settings({
+                                       'use_proxy' => true,
+                                       'url_pattern' => 'subdomain',
+                                       'url_pattern_reg' => '^(?<lang>[^.]+)\.'
+                                     })
+      store = Wovnrb.get_store(settings)
+      env = Wovnrb.get_env({
+                             'HTTP_X_FORWARDED_HOST' => 'ja.wovn.io, proxy.internal',
+                             'REQUEST_URI' => '/page'
+                           })
+      url_lang_switcher = UrlLanguageSwitcher.new(store)
+      header = Wovnrb::Headers.new(env, settings, url_lang_switcher)
+
+      assert_equal('ja', header.url_language)
+    end
+
+    def test_multi_value_x_forwarded_host_request_out
+      settings = Wovnrb.get_settings({
+                                       'url_pattern' => 'subdomain',
+                                       'url_pattern_reg' => '^(?<lang>[^.]+)\.',
+                                       'use_proxy' => true
+                                     })
+      store = Wovnrb.get_store(settings)
+      env = Wovnrb.get_env({
+                             'url' => 'http://localhost/contact',
+                             'HTTP_X_FORWARDED_HOST' => 'ja.wovn.io, proxy.internal'
+                           })
+      url_lang_switcher = UrlLanguageSwitcher.new(store)
+      header = Wovnrb::Headers.new(env, settings, url_lang_switcher)
+
+      request_out_env = header.request_out
+      assert_equal('wovn.io', request_out_env['HTTP_X_FORWARDED_HOST'])
+    end
   end
 end

data/wovnrb.gemspec

@@ -24,5 +24,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency 'addressable'
   spec.add_dependency 'lz4-ruby'
   spec.add_dependency 'nokogiri', '>= 1.12', '<2'
-  spec.add_dependency 'rack'
+  # Rack 3 drops Ruby 2.5 compatibility; keep the gem on Rack 2.x for the
+  # supported Ruby matrix.
+  spec.add_dependency 'rack', '< 3'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: wovnrb
 version: !ruby/object:Gem::Version
-  version: 3.13.0
+  version: 3.13.1
 platform: ruby
 authors:
 - Wovn Technologies, Inc.
-autorequire:
+autorequire: 
 bindir: bin
 cert_chain: []
-date: 2025-10-17 00:00:00.000000000 Z
+date: 2026-06-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -76,16 +76,16 @@ dependencies:
   name: rack
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3'
 description: Ruby gem for WOVN backend on Rack.
 email:
 - dev@wovn.io
@@ -262,7 +262,7 @@ licenses:
 - MIT
 metadata:
   rubygems_mfa_required: 'true'
-post_install_message:
+post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -277,8 +277,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.11
-signing_key:
+rubygems_version: 3.1.4
+signing_key: 
 specification_version: 4
 summary: Gem for WOVN.io
 test_files: []