Merge pull request #75 from PerimeterX/dev

Version 3.2.1

Author: Johnny Tordgeman

CHANGELOG.md

@@ -1,5 +1,8 @@
 # Change Log
 
+## [v3.2.1](https://github.com/PerimeterX/perimeterx-python-wsgi) (2019-08-22)
+- Upgrade dependency for security issue.
+
 ## [v3.2.0](https://github.com/PerimeterX/perimeterx-python-wsgi) (2019-03-17)
 - Added support for enforced_specific_routes
 - Added .json to the list of whitelisted extensions

README.md

@@ -4,9 +4,9 @@
 
 [PerimeterX](http://www.perimeterx.com) Python Middleware
 =============================================================
-> Latest stable version: [v3.2.0](https://pypi.org/project/perimeterx-python-wsgi/)
+> Latest stable version: [v3.2.1](https://pypi.org/project/perimeterx-python-wsgi/)
 
-> Latest GAE stable version: [v3.2.0](https://pypi.org/project/perimeterx-python-wsgi-gae/)
+> Latest GAE stable version: [v3.2.1](https://pypi.org/project/perimeterx-python-wsgi-gae/)
 
 Table of Contents
 -----------------

perimeterx/px_constants.py

@@ -30,7 +30,7 @@
 EMPTY_GIF_B64 = 'R0lGODlhAQABAPAAAAAAAAAAACH5BAEAAAAALAAAAAABAAEAAAICRAEAOw=='
 COLLECTOR_HOST = 'collector.perimeterx.net'
 FIRST_PARTY_FORWARDED_FOR = 'X-FORWARDED-FOR'
-MODULE_VERSION = 'Python WSGI Module{} v3.2.0'
+MODULE_VERSION = 'Python WSGI Module{} v3.2.1'
 API_RISK = '/api/v3/risk'
 PAGE_REQUESTED_ACTIVITY = 'page_requested'
 BLOCK_ACTIVITY = 'block'

requirements.txt

@@ -1,5 +1,5 @@
 setuptools==40.6.2
 requests>=2.18.4,<=2.20.1
-Werkzeug==0.14.1
+Werkzeug==0.15.5
 pystache>=0.5.1,<=0.5.4
 pycryptodome>=3.7.2, <4.0.0

setup-gae.py

@@ -2,7 +2,7 @@
 
 from setuptools import setup, find_packages
 
-version = 'v3.2.0'
+version = 'v3.2.1'
 setup(name='perimeterx-python-wsgi-gae',
       version=version,
       license='MIT',

setup.py

@@ -2,7 +2,7 @@
 
 from setuptools import setup, find_packages
 
-version = 'v3.2.0'
+version = 'v3.2.1'
 setup(name='perimeterx-python-wsgi',
       version=version,
       license='MIT',
@@ -13,6 +13,6 @@
       download_url='https://github.com/PerimeterX/perimeterx-python-wsgi/tarball/' + version,
       packages=find_packages(exclude=['dev', 'test*']),
       package_data={'perimeterx': ['templates/*']},
-      install_requires=['pystache>=0.5.1,<=0.5.4', 'requests>=2.18.4,<=2.20.1', 'setuptools==40.6.2', 'Werkzeug==0.14.1', 'pycryptodome>=3.7.2, <4.0.0'],
+      install_requires=['pystache>=0.5.1,<=0.5.4', 'requests>=2.18.4,<=2.20.1', 'setuptools==40.6.2', 'Werkzeug==0.15.5', 'pycryptodome>=3.7.2, <4.0.0'],
       classifiers=['Intended Audience :: Developers',
                    'Programming Language :: Python :: 2.7'])

test/test_px_testing_mode_handler.py

@@ -25,6 +25,6 @@ def test_testing_mode_handling(self):
         request = Request(env)
         context = PxContext(request, config)
         data, headers, status = px_testing_mode_handler.testing_mode_handling(context, config, {})
-        response_json = '{"vid": "", "ip": "127.0.0.1", "decoded_px_cookie": "", "is_made_s2s_api_call": false, "http_method": "GET", "px_cookie_hmac": "", "uuid": "", "http_version": "1.1", "hostname": "localhost", "risk_rtt": 0, "score": -1, "pxde": {}, "module_mode": 0, "pxde_verified": false, "cookie_origin": "cookie", "s2s_call_reason": "none", "sensitive_route": false, "px_cookies": {"_px3": "bd078865fa9627f626d6f7d6828ab595028d2c0974065ab6f6c5a9f80c4593cd:OCIluokZHHvqrWyu8zrWSH8Vu7AefCjrd4CMx/NXsX58LzeV40EZIlPG4gsNMoAYzH88s/GoZwv+DpQa76C21A==:1000:zwT+Rht/YGDNWKkzHtJAB7IiI00u4fOePL/3xWMs1nZ93lzW1XvAMGR2hLlHBmOv8O0CpylEQOZZTK1uQMls6O28Y8aQnTo5DETLkrbhpwCVeNjOcf8GVKTckITwuHfXbEcfHbdtb68s1+jHv1+vt/w/6HZqTzanaIsvFVp8vmA="}, "uri": "/", "full_url": "http://localhost/", "headers": {"Remote-Addr": "127.0.0.1", "Host": "localhost", "X-Forwarded-For": "127.0.0.1", "Content-Length": "0"}, "block_action": "", "user_agent": "", "block_reason": ""}'
+        response_json = '{"vid": "", "ip": "127.0.0.1", "decoded_px_cookie": "", "is_made_s2s_api_call": false, "http_method": "GET", "px_cookie_hmac": "", "uuid": "", "http_version": "1.1", "hostname": "localhost", "risk_rtt": 0, "score": -1, "pxde": {}, "module_mode": 0, "pxde_verified": false, "cookie_origin": "cookie", "s2s_call_reason": "none", "sensitive_route": false, "px_cookies": {"_px3": "bd078865fa9627f626d6f7d6828ab595028d2c0974065ab6f6c5a9f80c4593cd:OCIluokZHHvqrWyu8zrWSH8Vu7AefCjrd4CMx/NXsX58LzeV40EZIlPG4gsNMoAYzH88s/GoZwv+DpQa76C21A==:1000:zwT+Rht/YGDNWKkzHtJAB7IiI00u4fOePL/3xWMs1nZ93lzW1XvAMGR2hLlHBmOv8O0CpylEQOZZTK1uQMls6O28Y8aQnTo5DETLkrbhpwCVeNjOcf8GVKTckITwuHfXbEcfHbdtb68s1+jHv1+vt/w/6HZqTzanaIsvFVp8vmA="}, "uri": "/", "full_url": "http://localhost/", "headers": {"Remote-Addr": "127.0.0.1", "Host": "localhost", "X-Forwarded-For": "127.0.0.1"}, "block_action": "", "user_agent": "", "block_reason": ""}'
         self.assertEqual(data, response_json)