class Raven::Processor::SanitizeData

Constants

CREDIT_CARD_RE
DEFAULT_FIELDS
JSON_STARTS_WITH
QUERY_STRING

Attributes

sanitize_credit_cards[RW]
sanitize_fields[RW]
sanitize_fields_excluded[RW]

Public Class Methods

new(client) click to toggle source
Calls superclass method Raven::Processor::new
# File lib/raven/processor/sanitizedata.rb, line 13
def initialize(client)
  super
  self.sanitize_fields = client.configuration.sanitize_fields
  self.sanitize_credit_cards = client.configuration.sanitize_credit_cards
  self.sanitize_fields_excluded = client.configuration.sanitize_fields_excluded
end

Public Instance Methods

process(value, key = nil) click to toggle source
# File lib/raven/processor/sanitizedata.rb, line 20
def process(value, key = nil)
  case value
  when Hash
    !value.frozen? ? value.merge!(value) { |k, v| process v, k } : value.merge(value) { |k, v| process v, k }
  when Array
    !value.frozen? ? value.map! { |v| process v, key } : value.map { |v| process v, key }
  when Integer
    matches_regexes?(key, value.to_s) ? INT_MASK : value
  when String
    if value =~ fields_re && (json = parse_json_or_nil(value))
      # if this string is actually a json obj, convert and sanitize
      process(json).to_json
    elsif matches_regexes?(key, value)
      STRING_MASK
    elsif QUERY_STRING.include?(key)
      sanitize_query_string(value)
    else
      value
    end
  else
    value
  end
end

Private Instance Methods

fields_re() click to toggle source
# File lib/raven/processor/sanitizedata.rb, line 64
def fields_re
  return @fields_re if instance_variable_defined?(:@fields_re)
  fields = DEFAULT_FIELDS | sanitize_fields
  fields -= sanitize_fields_excluded
  @fields_re = /#{fields.map do |f|
    use_boundary?(f) ? "\\b#{f}\\b" : f
  end.join("|")}/i
end
matches_regexes?(k, v) click to toggle source
# File lib/raven/processor/sanitizedata.rb, line 59
def matches_regexes?(k, v)
  (sanitize_credit_cards && v =~ CREDIT_CARD_RE) ||
    k =~ fields_re
end
parse_json_or_nil(string) click to toggle source
# File lib/raven/processor/sanitizedata.rb, line 81
def parse_json_or_nil(string)
  return unless string.start_with?(*JSON_STARTS_WITH)
  JSON.parse(string)
rescue JSON::ParserError, NoMethodError
  nil
end
sanitize_query_string(query_string) click to toggle source
# File lib/raven/processor/sanitizedata.rb, line 52
def sanitize_query_string(query_string)
  query_hash = CGI.parse(query_string)
  sanitized = utf8_processor.process(query_hash)
  processed_query_hash = process(sanitized)
  URI.encode_www_form(processed_query_hash)
end
special_characters?(string) click to toggle source
# File lib/raven/processor/sanitizedata.rb, line 77
def special_characters?(string)
  REGEX_SPECIAL_CHARACTERS.select { |r| string.include?(r) }.any?
end
use_boundary?(string) click to toggle source
# File lib/raven/processor/sanitizedata.rb, line 73
def use_boundary?(string)
  !DEFAULT_FIELDS.include?(string) && !special_characters?(string)
end
utf8_processor() click to toggle source

CGI.parse takes our nice UTF-8 strings and converts them back to ASCII, so we have to convert them back, again.

# File lib/raven/processor/sanitizedata.rb, line 48
def utf8_processor
  @utf8_processor ||= Processor::UTF8Conversion.new
end