CVS commit: pkgsrc/security/ruby-ssrf_filter

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Mon Jul 20 05:27:56 UTC 2026

Added Files:
        pkgsrc/security/ruby-ssrf_filter: DESCR Makefile PLIST distinfo

Log Message:
security/ruby-ssrf_filter: add version 1.5.0

This package is required by newer version of www/ruby-css-parser package.

ssrf_filter makes it easy to defend against server side request forgery
(SSRF) attacks.  SSRF vulnerabilities happen when you accept URLs as user
input and fetch them on your server (for instance, when a user enters a link
into a Twitter/Facebook status update and a content preview is generated).

Users can pass in URLs or IPs such that your server will make requests to
the internal network.  For example if you're hosted on AWS they can request
the instance metadata endpoint http://169.254.169.254/latest/meta-data/ and
get your IAM credentials.

Attempts to guard against this are often implemented incorrectly, by
blocking all ip addresses, not handling IPv6 or http redirects correctly, or
having TOCTTOU bugs and other issues.

This gem provides a safe and easy way to fetch content from user-submitted
urls. It:

* handles URIs/IPv4/IPv6, redirects, DNS, etc, correctly
* has 0 runtime dependencies
* has a comprehensive test suite (100% code coverage)
* is tested against ruby 2.7, 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 4.0, and
  ruby-head


To generate a diff of this commit:
cvs rdiff -u -r0 -r1.1 pkgsrc/security/ruby-ssrf_filter/DESCR \
    pkgsrc/security/ruby-ssrf_filter/Makefile \
    pkgsrc/security/ruby-ssrf_filter/PLIST \
    pkgsrc/security/ruby-ssrf_filter/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Added files:

Index: pkgsrc/security/ruby-ssrf_filter/DESCR
diff -u /dev/null pkgsrc/security/ruby-ssrf_filter/DESCR:1.1
--- /dev/null   Mon Jul 20 05:27:56 2026
+++ pkgsrc/security/ruby-ssrf_filter/DESCR      Mon Jul 20 05:27:56 2026
@@ -0,0 +1,22 @@
+ssrf_filter makes it easy to defend against server side request forgery
+(SSRF) attacks.  SSRF vulnerabilities happen when you accept URLs as user
+input and fetch them on your server (for instance, when a user enters a link
+into a Twitter/Facebook status update and a content preview is generated).
+
+Users can pass in URLs or IPs such that your server will make requests to
+the internal network.  For example if you're hosted on AWS they can request
+the instance metadata endpoint http://169.254.169.254/latest/meta-data/ and
+get your IAM credentials.
+
+Attempts to guard against this are often implemented incorrectly, by
+blocking all ip addresses, not handling IPv6 or http redirects correctly, or
+having TOCTTOU bugs and other issues.
+
+This gem provides a safe and easy way to fetch content from user-submitted
+urls. It:
+
+* handles URIs/IPv4/IPv6, redirects, DNS, etc, correctly
+* has 0 runtime dependencies
+* has a comprehensive test suite (100% code coverage)
+* is tested against ruby 2.7, 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 4.0, and
+  ruby-head
Index: pkgsrc/security/ruby-ssrf_filter/Makefile
diff -u /dev/null pkgsrc/security/ruby-ssrf_filter/Makefile:1.1
--- /dev/null   Mon Jul 20 05:27:56 2026
+++ pkgsrc/security/ruby-ssrf_filter/Makefile   Mon Jul 20 05:27:56 2026
@@ -0,0 +1,14 @@
+# $NetBSD: Makefile,v 1.1 2026/07/20 05:27:56 taca Exp $
+
+DISTNAME=      ssrf_filter-1.5.0
+CATEGORIES=    security
+
+MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
+HOMEPAGE=      https://github.com/arkadiyt/ssrf_filter
+COMMENT=       Make it easy to prevent SSRF attacks
+LICENSE=       mit
+
+USE_LANGUAGES= # none
+
+.include "../../lang/ruby/gem.mk"
+.include "../../mk/bsd.pkg.mk"
Index: pkgsrc/security/ruby-ssrf_filter/PLIST
diff -u /dev/null pkgsrc/security/ruby-ssrf_filter/PLIST:1.1
--- /dev/null   Mon Jul 20 05:27:56 2026
+++ pkgsrc/security/ruby-ssrf_filter/PLIST      Mon Jul 20 05:27:56 2026
@@ -0,0 +1,6 @@
+@comment $NetBSD: PLIST,v 1.1 2026/07/20 05:27:56 taca Exp $
+${GEM_HOME}/cache/${GEM_NAME}.gem
+${GEM_LIBDIR}/lib/ssrf_filter.rb
+${GEM_LIBDIR}/lib/ssrf_filter/ssrf_filter.rb
+${GEM_LIBDIR}/lib/ssrf_filter/version.rb
+${GEM_HOME}/specifications/${GEM_NAME}.gemspec
Index: pkgsrc/security/ruby-ssrf_filter/distinfo
diff -u /dev/null pkgsrc/security/ruby-ssrf_filter/distinfo:1.1
--- /dev/null   Mon Jul 20 05:27:56 2026
+++ pkgsrc/security/ruby-ssrf_filter/distinfo   Mon Jul 20 05:27:56 2026
@@ -0,0 +1,5 @@
+$NetBSD: distinfo,v 1.1 2026/07/20 05:27:56 taca Exp $
+
+BLAKE2s (ssrf_filter-1.5.0.gem) = b1eec4ec3e80391999c8a005ba35878978046afcff1d5307d61b8a1016360c96
+SHA512 (ssrf_filter-1.5.0.gem) = 2199208c40b1a31d138becc5153288da43dcda115ea79ae87162a676f0c33c0d2368523839eebcc06c7bf268bde4897abbd6227cceda2533534c4f782b885c90
+Size (ssrf_filter-1.5.0.gem) = 7680 bytes