zendesk_apps_support 4.29.7 → 4.29.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a2efe550a3304af99cfc61a7fa09908394b1223e80ba8772abd041a804c52992
-  data.tar.gz: 0cd194aa7b336f7cb4f09c1af7d3616de08894cee204d06459b2bfc27e958c87
+  metadata.gz: '05133378592731040e3105b29a3624fe85d190ba5ed7bfc872d99da645aad8c5'
+  data.tar.gz: 5e3bb520f055e87596585d2cd93821e801ad79a509f5c6bff1a12555d69214f4
 SHA512:
-  metadata.gz: c12aa9330247f65c417a8620a5e7197a13b5fd61073e513839f53fe41fc82e3272b4ecfcc6f8a685c5751ec0bd14e37001490c585d2d98d274e2964e12e7b726
-  data.tar.gz: 91f0e3ebc1710b74556ad8b204ef6222cda476238fae02e66fd05469b354dc148ab56e1ee7b3106ce8fb8118c74f0398dbc470c8b4c14f1282d12556680b4ab5
+  metadata.gz: 5c4b261f98f1b4ee30324ba70f7f78b24a9d4fbefc0e5e6c209cecd5764218b6aa738ef6fbdb6989cb5de170f40af454a32d738d371b6ce385a8b14f598ca0cb
+  data.tar.gz: 7c283902ea1fe0907abbcb12679fc12fe2ec3d41884babb1e8a6ee50c781b2b78d76c12ee070302ac46fbe2a6d4a52b4c443d641b90754e3a15419dddb0a5ec6

data/config/locales/en.yml

@@ -123,6 +123,9 @@ en:
                 do not match products in translations (%{translation_products})
               insecure_token_parameter_in_manifest: 'Make sure to set secure to true
                 when using keys in Settings. Learn more: %{link}'
+              default_secure_or_hidden_parameter_in_manifest: Default values for secure
+                or hidden parameters are not stored securely. Be sure to review them
+                and confirm they do not contain sensitive data
             stylesheet_error: 'Sass error: %{sass_error}'
             invalid_type_parameter:
               one: "%{invalid_types} is an invalid parameter type."

data/config/locales/translations/zendesk_apps_support.yml

@@ -351,6 +351,11 @@ parts:
       title: "Validation message to indicate missing secure(true) field in manifest's token parameter. Do not translate 'secure' and 'true'. Secure(true) in manifest refers to https://developer.zendesk.com/apps/docs/developer-guide/using_sdk#using-secure-settings"
       value: "Make sure to set secure to true when using keys in Settings. Learn more: %{link}"
       screenshot: "https://drive.google.com/open?id=1ss3nNN2RG29R7StjCtiH8qjuwFBlRApJ"
+  - translation:
+      key: "txt.apps.admin.error.app_build.translation.default_secure_or_hidden_parameter_in_manifest"
+      title: "Validation message to indicate that a hidden or secure manifest parameter has a default value. Do not translate 'secure' and 'hidden'. Secure(true) in manifest refers to https://developer.zendesk.com/apps/docs/developer-guide/using_sdk#using-secure-settings"
+      value: "Default values for secure or hidden parameters are not stored securely. Be sure to review them and confirm they do not contain sensitive data"
+      screenshot: "https://drive.google.com/file/d/1MI6ci6Jz6xtwOXjcbHFCfNi1FjXKOuv9/view?usp=sharing"
   - translation:
       key: "txt.apps.admin.error.app_build.stylesheet_error"
       title: "App builder job: invalid stylesheet syntax"

data/lib/zendesk_apps_support/validations/mime.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
-require 'mimemagic'
+require 'marcel'
 
 module ZendeskAppsSupport
   module Validations
@@ -20,9 +20,8 @@ module ZendeskAppsSupport
         private
 
         def block_listed?(app_file)
-          mime_type = MimeMagic.by_magic(app_file.read)
-
-          content_subtype = mime_type.subtype if mime_type
+          mime_type = Marcel::MimeType.for(StringIO.new(app_file.read))
+          content_subtype = mime_type.split('/', 2).last if mime_type
           extension_name = app_file.extension.delete('.')
 
           ([content_subtype, extension_name] & UNSUPPORTED_MIME_TYPES).any?

data/lib/zendesk_apps_support/validations/secure_settings.rb

@@ -11,12 +11,18 @@ module ZendeskAppsSupport
           manifest_params = package.manifest.parameters
 
           insecure_params_found = manifest_params.any? { |param| insecure_param?(param) }
-
           package.warnings << secure_settings_warning if insecure_params_found
+
+          secure_or_hidden_default_param_found = manifest_params.any? { |param| secure_or_hidden_default_param?(param) }
+          package.warnings << hidden_default_parameter_warning if secure_or_hidden_default_param_found
         end
 
         private
 
+        def secure_or_hidden_default_param?(parameter)
+          parameter.default? && (parameter.secure || parameter.type == 'hidden')
+        end
+
         def insecure_param?(parameter)
           parameter.name =~ SECURABLE_KEYWORDS_REGEXP && type_password_or_text?(parameter.type) && !parameter.secure
         end
@@ -25,6 +31,12 @@ module ZendeskAppsSupport
           parameter_type == 'text' || parameter_type == 'password'
         end
 
+        def hidden_default_parameter_warning
+          I18n.t(
+            'txt.apps.admin.error.app_build.translation.default_secure_or_hidden_parameter_in_manifest'
+          )
+        end
+
         def secure_settings_warning
           I18n.t(
             'txt.apps.admin.error.app_build.translation.insecure_token_parameter_in_manifest',

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: zendesk_apps_support
 version: !ruby/object:Gem::Version
-  version: 4.29.7
+  version: 4.29.8
 platform: ruby
 authors:
 - James A. Rosen
@@ -11,7 +11,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-02-23 00:00:00.000000000 Z
+date: 2021-05-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: i18n
@@ -146,19 +146,19 @@ dependencies:
       - !ruby/object:Gem::Version
         version: 0.9.10
 - !ruby/object:Gem::Dependency
-  name: mimemagic
+  name: marcel
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 0.3.3
+        version: '0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 0.3.3
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: ipaddress_2
   requirement: !ruby/object:Gem::Requirement
@@ -257,6 +257,20 @@ dependencies:
     - - '='
       - !ruby/object:Gem::Version
         version: 1.17.3
+- !ruby/object:Gem::Dependency
+  name: parallel
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.12.1
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.12.1
 description: Support to help you develop Zendesk Apps.
 email:
 - dev@zendesk.com
@@ -325,7 +339,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 1.3.6
 requirements: []
-rubygems_version: 3.0.8
+rubygems_version: 3.2.17
 signing_key:
 specification_version: 4
 summary: Support to help you develop Zendesk Apps.