Contents

# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
# frozen_string_literal: true

require 'contrast/framework/rails/patch/assess_configuration'
module Contrast
  module Framework
    module Rails
      module Patch
        # Our patch into the Rails::Application::Configuration Class, allowing
        # for the runtime detection of insecure configurations on individual
        # ActionDispatch::Session::AbstractStore instances within the
        # application.
        class RailsApplicationConfiguration
          def self.instrument
            @_instrument ||= begin
                               ::Rails::Application::Configuration.class_eval do
                                 alias_method :cs__patched_session_store, :session_store
                                 def session_store *args
                                   ret = cs__patched_session_store(*args)
                                   Contrast::Framework::Rails::Patch::AssessConfiguration.analyze_session_store(*args)
                                   ret
                                 end
                               end
                               true
                             end
          end
        end
      end
    end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
contrast-agent-3.15.0	lib/contrast/framework/rails/patch/rails_application_configuration.rb
contrast-agent-3.14.0	lib/contrast/framework/rails/patch/rails_application_configuration.rb