Class: SqlSafetyNet::Middleware

Inherits:
Object
  • Object
show all
Defined in:
lib/sql_safety_net/middleware.rb

Overview

Rack middleware for analyzing queries on a request.

The X-SqlSafetyNet header will be set with summary info about the queries.

If the request responds with HTML and the request queries are flagged or if the always_show option is set, debugging info will be injected into the page.

Constant Summary collapse

HTML_CONTENT_TYPE = 
/text\/(x?)html/i.freeze

Instance Method Summary collapse

Constructor Details

#initialize(app) ⇒ Middleware

Returns a new instance of Middleware.



13
14
15
 
# File 'lib/sql_safety_net/middleware.rb', line 13

def initialize(app)
  @app = app
end

Instance Method Details

#call(env) ⇒ Object 



17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
 
# File 'lib/sql_safety_net/middleware.rb', line 17

def call(env)
  QueryAnalysis.capture do |analysis|
    response = @app.call(env)
    unless analysis.queries.empty?
      formatter = Formatter.new(analysis)
      Rails.logger.debug(formatter.to_s) if ActiveRecord::Base.logger
      request = Rack::Request.new(env)
      wrapped_response = Rack::Response.new(response[2], response[0], response[1])
      wrapped_response["X-SqlSafetyNet"] = formatter.summary
    
      if SqlSafetyNet.config.always_show || analysis.flagged?
        unless request.xhr? || analysis.queries.empty?
          content_type = wrapped_response.content_type
          if content_type && content_type.match(HTML_CONTENT_TYPE) && !wrapped_response.redirection?
            wrapped_response.write(formatter.to_html)
          end
        end
      end
      response = wrapped_response.finish
    end
    response
  end
end