contrast-agent 3.8.4 → 6.9.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.dockerignore +0 -1
- data/.flayignore +1 -0
- data/.gitignore +8 -5
- data/.gitmodules +0 -3
- data/.rspec +0 -1
- data/.rspec_parallel +6 -0
- data/.simplecov +6 -2
- data/Gemfile +1 -1
- data/LICENSE.txt +1 -1
- data/Rakefile +5 -2
- data/ext/build_funchook.rb +27 -11
- data/ext/cs__assess_array/cs__assess_array.c +45 -7
- data/ext/cs__assess_array/cs__assess_array.h +5 -1
- data/ext/cs__assess_array/extconf.rb +3 -0
- data/ext/cs__assess_basic_object/cs__assess_basic_object.c +39 -17
- data/ext/cs__assess_basic_object/cs__assess_basic_object.h +2 -1
- data/ext/cs__assess_basic_object/extconf.rb +3 -0
- data/ext/cs__assess_fiber_track/cs__assess_fiber_track.c +9 -13
- data/ext/cs__assess_fiber_track/cs__assess_fiber_track.h +3 -4
- data/ext/cs__assess_fiber_track/extconf.rb +3 -0
- data/ext/cs__assess_hash/cs__assess_hash.c +46 -21
- data/ext/cs__assess_hash/cs__assess_hash.h +5 -6
- data/ext/cs__assess_hash/extconf.rb +3 -0
- data/ext/cs__assess_kernel/cs__assess_kernel.c +29 -15
- data/ext/cs__assess_kernel/cs__assess_kernel.h +3 -0
- data/ext/cs__assess_kernel/extconf.rb +3 -0
- data/ext/cs__assess_marshal_module/cs__assess_marshal_module.c +55 -23
- data/ext/cs__assess_marshal_module/cs__assess_marshal_module.h +6 -3
- data/ext/cs__assess_marshal_module/extconf.rb +3 -0
- data/ext/cs__assess_module/cs__assess_module.c +82 -23
- data/ext/cs__assess_module/cs__assess_module.h +10 -0
- data/ext/cs__assess_module/extconf.rb +3 -0
- data/ext/cs__assess_regexp/cs__assess_regexp.c +28 -9
- data/ext/cs__assess_regexp/cs__assess_regexp.h +3 -0
- data/ext/cs__assess_regexp/extconf.rb +3 -0
- data/ext/cs__assess_string/cs__assess_string.c +53 -21
- data/ext/cs__assess_string/cs__assess_string.h +7 -1
- data/ext/cs__assess_string/extconf.rb +3 -0
- data/ext/cs__assess_string_interpolation/cs__assess_string_interpolation.c +39 -0
- data/ext/cs__assess_string_interpolation/cs__assess_string_interpolation.h +13 -0
- data/ext/cs__assess_string_interpolation/extconf.rb +5 -0
- data/ext/cs__assess_test/cs__assess_test.h +9 -0
- data/ext/cs__assess_test/cs__assess_tests.c +22 -0
- data/ext/cs__assess_test/extconf.rb +5 -0
- data/ext/cs__assess_yield_track/cs__assess_yield_track.c +30 -0
- data/ext/cs__assess_yield_track/cs__assess_yield_track.h +11 -0
- data/ext/cs__assess_yield_track/extconf.rb +5 -0
- data/ext/cs__common/cs__common.c +246 -10
- data/ext/cs__common/cs__common.h +71 -2
- data/ext/cs__common/extconf.rb +3 -16
- data/ext/cs__contrast_patch/cs__contrast_patch.c +255 -155
- data/ext/cs__contrast_patch/cs__contrast_patch.h +13 -14
- data/ext/cs__contrast_patch/extconf.rb +3 -0
- data/ext/cs__os_information/cs__os_information.c +34 -0
- data/ext/cs__os_information/cs__os_information.h +7 -0
- data/ext/cs__os_information/extconf.rb +5 -0
- data/ext/cs__scope/cs__scope.c +755 -55
- data/ext/cs__scope/cs__scope.h +75 -20
- data/ext/cs__scope/extconf.rb +3 -0
- data/ext/cs__tests/cs__tests.c +12 -0
- data/ext/cs__tests/cs__tests.h +3 -0
- data/ext/cs__tests/extconf.rb +5 -0
- data/ext/extconf_common.rb +4 -34
- data/lib/contrast/agent/assess/contrast_object.rb +54 -0
- data/lib/contrast/agent/assess/events/event_data.rb +30 -0
- data/lib/contrast/agent/assess/finalizers/freeze.rb +15 -0
- data/lib/contrast/agent/assess/finalizers/hash.rb +107 -0
- data/lib/contrast/agent/assess/policy/dynamic_source_factory.rb +58 -36
- data/lib/contrast/agent/assess/policy/patcher.rb +13 -48
- data/lib/contrast/agent/assess/policy/policy.rb +20 -37
- data/lib/contrast/agent/assess/policy/policy_node.rb +96 -200
- data/lib/contrast/agent/assess/policy/policy_node_utils.rb +50 -0
- data/lib/contrast/agent/assess/policy/policy_scanner.rb +15 -12
- data/lib/contrast/agent/assess/policy/preshift.rb +50 -19
- data/lib/contrast/agent/assess/policy/propagation_method.rb +200 -192
- data/lib/contrast/agent/assess/policy/propagation_node.rb +49 -41
- data/lib/contrast/agent/assess/policy/propagator/append.rb +32 -15
- data/lib/contrast/agent/assess/policy/propagator/base.rb +5 -3
- data/lib/contrast/agent/assess/policy/propagator/buffer.rb +119 -0
- data/lib/contrast/agent/assess/policy/propagator/center.rb +12 -8
- data/lib/contrast/agent/assess/policy/propagator/custom.rb +7 -3
- data/lib/contrast/agent/assess/policy/propagator/database_write.rb +34 -25
- data/lib/contrast/agent/assess/policy/propagator/insert.rb +15 -11
- data/lib/contrast/agent/assess/policy/propagator/keep.rb +23 -6
- data/lib/contrast/agent/assess/policy/propagator/match_data.rb +118 -0
- data/lib/contrast/agent/assess/policy/propagator/next.rb +7 -6
- data/lib/contrast/agent/assess/policy/propagator/prepend.rb +13 -6
- data/lib/contrast/agent/assess/policy/propagator/rack_protection.rb +73 -0
- data/lib/contrast/agent/assess/policy/propagator/remove.rb +53 -41
- data/lib/contrast/agent/assess/policy/propagator/replace.rb +5 -3
- data/lib/contrast/agent/assess/policy/propagator/reverse.rb +7 -6
- data/lib/contrast/agent/assess/policy/propagator/select.rb +45 -36
- data/lib/contrast/agent/assess/policy/propagator/splat.rb +44 -21
- data/lib/contrast/agent/assess/policy/propagator/split.rb +176 -22
- data/lib/contrast/agent/assess/policy/propagator/substitution.rb +7 -132
- data/lib/contrast/agent/assess/policy/propagator/substitution_utils.rb +190 -0
- data/lib/contrast/agent/assess/policy/propagator/trim.rb +74 -52
- data/lib/contrast/agent/assess/policy/propagator.rb +21 -18
- data/lib/contrast/agent/assess/policy/source_method.rb +176 -177
- data/lib/contrast/agent/assess/policy/source_node.rb +3 -17
- data/lib/contrast/agent/assess/policy/source_validation/cross_site_validator.rb +32 -0
- data/lib/contrast/agent/assess/policy/source_validation/source_validation.rb +34 -0
- data/lib/contrast/agent/assess/policy/trigger/reflected_xss.rb +102 -0
- data/lib/contrast/agent/assess/policy/trigger/xpath.rb +57 -0
- data/lib/contrast/agent/assess/policy/trigger_method.rb +160 -173
- data/lib/contrast/agent/assess/policy/trigger_node.rb +162 -39
- data/lib/contrast/agent/assess/policy/trigger_validation/redos_validator.rb +60 -0
- data/lib/contrast/agent/assess/policy/trigger_validation/ssrf_validator.rb +8 -38
- data/lib/contrast/agent/assess/policy/trigger_validation/trigger_validation.rb +22 -7
- data/lib/contrast/agent/assess/policy/trigger_validation/xss_validator.rb +6 -15
- data/lib/contrast/agent/assess/properties.rb +15 -354
- data/lib/contrast/agent/assess/property/evented.rb +58 -0
- data/lib/contrast/agent/assess/property/tagged.rb +246 -0
- data/lib/contrast/agent/assess/property/updated.rb +131 -0
- data/lib/contrast/agent/assess/rule/provider/hardcoded_key.rb +58 -19
- data/lib/contrast/agent/assess/rule/provider/hardcoded_password.rb +22 -17
- data/lib/contrast/agent/assess/rule/provider/hardcoded_value_rule.rb +93 -81
- data/lib/contrast/agent/assess/rule/provider.rb +4 -4
- data/lib/contrast/agent/assess/rule/response/auto_complete_rule.rb +69 -0
- data/lib/contrast/agent/assess/rule/response/base_rule.rb +121 -0
- data/lib/contrast/agent/assess/rule/response/body_rule.rb +107 -0
- data/lib/contrast/agent/assess/rule/response/cache_control_header_rule.rb +195 -0
- data/lib/contrast/agent/assess/rule/response/click_jacking_header_rule.rb +26 -0
- data/lib/contrast/agent/assess/rule/response/csp_header_insecure_rule.rb +100 -0
- data/lib/contrast/agent/assess/rule/response/csp_header_missing_rule.rb +26 -0
- data/lib/contrast/agent/assess/rule/response/framework/rails_support.rb +34 -0
- data/lib/contrast/agent/assess/rule/response/header_rule.rb +70 -0
- data/lib/contrast/agent/assess/rule/response/hsts_header_rule.rb +36 -0
- data/lib/contrast/agent/assess/rule/response/parameters_pollution_rule.rb +61 -0
- data/lib/contrast/agent/assess/rule/response/x_content_type_header_rule.rb +26 -0
- data/lib/contrast/agent/assess/rule/response/x_xss_protection_header_rule.rb +34 -0
- data/lib/contrast/agent/assess/tag.rb +84 -41
- data/lib/contrast/agent/assess/tracker.rb +70 -0
- data/lib/contrast/agent/assess.rb +7 -29
- data/lib/contrast/agent/at_exit_hook.rb +28 -17
- data/lib/contrast/agent/deadzone/policy/deadzone_node.rb +11 -6
- data/lib/contrast/agent/deadzone/policy/policy.rb +11 -7
- data/lib/contrast/agent/disable_reaction.rb +6 -10
- data/lib/contrast/agent/excluder.rb +224 -0
- data/lib/contrast/agent/exclusion_matcher.rb +40 -74
- data/lib/contrast/agent/inventory/database_config.rb +174 -0
- data/lib/contrast/agent/inventory/dependencies.rb +52 -0
- data/lib/contrast/agent/inventory/dependency_analysis.rb +34 -0
- data/lib/contrast/agent/inventory/dependency_usage_analysis.rb +120 -0
- data/lib/contrast/agent/inventory/policy/datastores.rb +51 -0
- data/lib/contrast/agent/inventory/policy/policy.rb +5 -5
- data/lib/contrast/agent/inventory/policy/trigger_node.rb +2 -2
- data/lib/contrast/agent/inventory.rb +14 -0
- data/lib/contrast/agent/middleware.rb +146 -299
- data/lib/contrast/agent/module_data.rb +5 -4
- data/lib/contrast/agent/patching/policy/after_load_patch.rb +54 -7
- data/lib/contrast/agent/patching/policy/after_load_patcher.rb +103 -27
- data/lib/contrast/agent/patching/policy/method_policy.rb +53 -64
- data/lib/contrast/agent/patching/policy/method_policy_extend.rb +113 -0
- data/lib/contrast/agent/patching/policy/module_policy.rb +27 -47
- data/lib/contrast/agent/patching/policy/patch.rb +147 -241
- data/lib/contrast/agent/patching/policy/patch_status.rb +21 -45
- data/lib/contrast/agent/patching/policy/patcher.rb +126 -161
- data/lib/contrast/agent/patching/policy/policy.rb +66 -57
- data/lib/contrast/agent/patching/policy/policy_node.rb +63 -32
- data/lib/contrast/agent/patching/policy/trigger_node.rb +32 -15
- data/lib/contrast/agent/protect/exploitable_collection.rb +38 -0
- data/lib/contrast/agent/protect/input_analyzer/input_analyzer.rb +170 -0
- data/lib/contrast/agent/protect/input_analyzer/worth_watching_analyzer.rb +116 -0
- data/lib/contrast/agent/protect/policy/applies_command_injection_rule.rb +65 -0
- data/lib/contrast/agent/protect/policy/applies_deserialization_rule.rb +97 -0
- data/lib/contrast/agent/protect/policy/applies_no_sqli_rule.rb +69 -0
- data/lib/contrast/agent/protect/policy/applies_path_traversal_rule.rb +138 -0
- data/lib/contrast/agent/protect/policy/applies_sqli_rule.rb +55 -0
- data/lib/contrast/agent/protect/policy/applies_xxe_rule.rb +125 -0
- data/lib/contrast/agent/protect/policy/policy.rb +10 -10
- data/lib/contrast/agent/protect/policy/rule_applicator.rb +102 -0
- data/lib/contrast/agent/protect/policy/trigger_node.rb +2 -2
- data/lib/contrast/agent/protect/rule/base.rb +205 -95
- data/lib/contrast/agent/protect/rule/base_service.rb +73 -14
- data/lib/contrast/agent/protect/rule/bot_blocker/bot_blocker_input_classification.rb +98 -0
- data/lib/contrast/agent/protect/rule/bot_blocker.rb +81 -0
- data/lib/contrast/agent/protect/rule/cmd_injection.rb +53 -123
- data/lib/contrast/agent/protect/rule/cmdi/cmdi_backdoors.rb +132 -0
- data/lib/contrast/agent/protect/rule/cmdi/cmdi_base_rule.rb +169 -0
- data/lib/contrast/agent/protect/rule/cmdi/cmdi_chained_command.rb +64 -0
- data/lib/contrast/agent/protect/rule/cmdi/cmdi_dangerous_path.rb +63 -0
- data/lib/contrast/agent/protect/rule/cmdi/cmdi_input_classification.rb +27 -0
- data/lib/contrast/agent/protect/rule/default_scanner.rb +69 -25
- data/lib/contrast/agent/protect/rule/deserialization.rb +32 -48
- data/lib/contrast/agent/protect/rule/http_method_tampering/http_method_tampering_input_classification.rb +96 -0
- data/lib/contrast/agent/protect/rule/http_method_tampering.rb +65 -62
- data/lib/contrast/agent/protect/rule/no_sqli/mongo_no_sql_scanner.rb +2 -3
- data/lib/contrast/agent/protect/rule/no_sqli/no_sqli_input_classification.rb +226 -0
- data/lib/contrast/agent/protect/rule/no_sqli.rb +47 -53
- data/lib/contrast/agent/protect/rule/path_traversal/path_traversal_input_classification.rb +61 -0
- data/lib/contrast/agent/protect/rule/path_traversal/path_traversal_semantic_security_bypass.rb +114 -0
- data/lib/contrast/agent/protect/rule/path_traversal.rb +57 -26
- data/lib/contrast/agent/protect/rule/sql_sample_builder.rb +155 -0
- data/lib/contrast/agent/protect/rule/sqli/default_sql_scanner.rb +1 -1
- data/lib/contrast/agent/protect/rule/sqli/mysql_sql_scanner.rb +1 -1
- data/lib/contrast/agent/protect/rule/sqli/postgres_sql_scanner.rb +2 -2
- data/lib/contrast/agent/protect/rule/sqli/sqli_base_rule.rb +37 -0
- data/lib/contrast/agent/protect/rule/sqli/sqli_input_classification.rb +28 -0
- data/lib/contrast/agent/protect/rule/sqli/sqli_semantic/sqli_dangerous_functions.rb +67 -0
- data/lib/contrast/agent/protect/rule/sqli/sqlite_sql_scanner.rb +1 -1
- data/lib/contrast/agent/protect/rule/sqli.rb +78 -62
- data/lib/contrast/agent/protect/rule/unsafe_file_upload/unsafe_file_upload_input_classification.rb +58 -0
- data/lib/contrast/agent/protect/rule/unsafe_file_upload.rb +19 -2
- data/lib/contrast/agent/protect/rule/xss/reflected_xss_input_classification.rb +58 -0
- data/lib/contrast/agent/protect/rule/xss.rb +20 -2
- data/lib/contrast/agent/protect/rule/xxe/entity_wrapper.rb +25 -21
- data/lib/contrast/agent/protect/rule/xxe.rb +69 -39
- data/lib/contrast/agent/protect/rule.rb +22 -25
- data/lib/contrast/agent/reporting/attack_result/attack_result.rb +71 -0
- data/lib/contrast/agent/reporting/attack_result/rasp_rule_sample.rb +86 -0
- data/lib/contrast/agent/reporting/attack_result/response_type.rb +29 -0
- data/lib/contrast/agent/reporting/attack_result/user_input.rb +98 -0
- data/lib/contrast/agent/reporting/details/bot_blocker_details.rb +29 -0
- data/lib/contrast/agent/reporting/details/cmd_injection_details.rb +30 -0
- data/lib/contrast/agent/reporting/details/details.rb +18 -0
- data/lib/contrast/agent/reporting/details/http_method_tempering_details.rb +27 -0
- data/lib/contrast/agent/reporting/details/ip_denylist_details.rb +35 -0
- data/lib/contrast/agent/reporting/details/no_sqli_details.rb +36 -0
- data/lib/contrast/agent/reporting/details/path_traversal_details.rb +24 -0
- data/lib/contrast/agent/reporting/details/path_traversal_semantic_analysis_details.rb +32 -0
- data/lib/contrast/agent/reporting/details/protect_rule_details.rb +17 -0
- data/lib/contrast/agent/reporting/details/sqli_dangerous_functions.rb +22 -0
- data/lib/contrast/agent/reporting/details/sqli_details.rb +36 -0
- data/lib/contrast/agent/reporting/details/untrusted_deserialization_details.rb +27 -0
- data/lib/contrast/agent/reporting/details/virtual_patch_details.rb +30 -0
- data/lib/contrast/agent/reporting/details/xss_details.rb +33 -0
- data/lib/contrast/agent/reporting/details/xss_match.rb +30 -0
- data/lib/contrast/agent/reporting/details/xxe_details.rb +36 -0
- data/lib/contrast/agent/reporting/details/xxe_match.rb +25 -0
- data/lib/contrast/agent/reporting/details/xxe_wrapper.rb +25 -0
- data/lib/contrast/agent/reporting/input_analysis/details/bot_blocker_details.rb +27 -0
- data/lib/contrast/agent/reporting/input_analysis/details/protect_rule_details.rb +15 -0
- data/lib/contrast/agent/reporting/input_analysis/input_analysis.rb +43 -0
- data/lib/contrast/agent/reporting/input_analysis/input_analysis_result.rb +129 -0
- data/lib/contrast/agent/reporting/input_analysis/input_type.rb +44 -0
- data/lib/contrast/agent/reporting/input_analysis/score_level.rb +21 -0
- data/lib/contrast/agent/reporting/masker/masker.rb +258 -0
- data/lib/contrast/agent/reporting/masker/masker_utils.rb +33 -0
- data/lib/contrast/agent/reporting/report.rb +31 -0
- data/lib/contrast/agent/reporting/reporter.rb +165 -0
- data/lib/contrast/agent/reporting/reporter_heartbeat.rb +47 -0
- data/lib/contrast/agent/reporting/reporting_events/agent_startup.rb +34 -0
- data/lib/contrast/agent/reporting/reporting_events/application_activity.rb +120 -0
- data/lib/contrast/agent/reporting/reporting_events/application_defend_activity.rb +85 -0
- data/lib/contrast/agent/reporting/reporting_events/application_defend_attack_activity.rb +65 -0
- data/lib/contrast/agent/reporting/reporting_events/application_defend_attack_sample.rb +102 -0
- data/lib/contrast/agent/reporting/reporting_events/application_defend_attack_sample_activity.rb +68 -0
- data/lib/contrast/agent/reporting/reporting_events/application_defend_attack_sample_stack.rb +22 -0
- data/lib/contrast/agent/reporting/reporting_events/application_defend_attacker_activity.rb +62 -0
- data/lib/contrast/agent/reporting/reporting_events/application_inventory.rb +42 -0
- data/lib/contrast/agent/reporting/reporting_events/application_inventory_activity.rb +57 -0
- data/lib/contrast/agent/reporting/reporting_events/application_reporting_event.rb +27 -0
- data/lib/contrast/agent/reporting/reporting_events/application_startup.rb +44 -0
- data/lib/contrast/agent/reporting/reporting_events/application_startup_instrumentation.rb +27 -0
- data/lib/contrast/agent/reporting/reporting_events/application_update.rb +56 -0
- data/lib/contrast/agent/reporting/reporting_events/architecture_component.rb +72 -0
- data/lib/contrast/agent/reporting/reporting_events/discovered_route.rb +126 -0
- data/lib/contrast/agent/reporting/reporting_events/finding.rb +210 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event.rb +449 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_object.rb +104 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_parent_object.rb +49 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_property.rb +51 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_signature.rb +106 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_source.rb +74 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_stack.rb +68 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_taint_range.rb +71 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_taint_range_tags.rb +105 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_request.rb +134 -0
- data/lib/contrast/agent/reporting/reporting_events/library_discovery.rb +89 -0
- data/lib/contrast/agent/reporting/reporting_events/library_usage_observation.rb +48 -0
- data/lib/contrast/agent/reporting/reporting_events/observed_library_usage.rb +45 -0
- data/lib/contrast/agent/reporting/reporting_events/observed_route.rb +89 -0
- data/lib/contrast/agent/reporting/reporting_events/poll.rb +23 -0
- data/lib/contrast/agent/reporting/reporting_events/preflight.rb +41 -0
- data/lib/contrast/agent/reporting/reporting_events/preflight_message.rb +74 -0
- data/lib/contrast/agent/reporting/reporting_events/reporting_event.rb +66 -0
- data/lib/contrast/agent/reporting/reporting_events/route_coverage.rb +89 -0
- data/lib/contrast/agent/reporting/reporting_events/route_discovery.rb +63 -0
- data/lib/contrast/agent/reporting/reporting_events/route_discovery_observation.rb +53 -0
- data/lib/contrast/agent/reporting/reporting_events/server_reporting_event.rb +35 -0
- data/lib/contrast/agent/reporting/reporting_events/server_settings.rb +40 -0
- data/lib/contrast/agent/reporting/reporting_utilities/audit.rb +130 -0
- data/lib/contrast/agent/reporting/reporting_utilities/build_preflight.rb +35 -0
- data/lib/contrast/agent/reporting/reporting_utilities/endpoints.rb +176 -0
- data/lib/contrast/agent/reporting/reporting_utilities/headers.rb +54 -0
- data/lib/contrast/agent/reporting/reporting_utilities/reporter_client.rb +143 -0
- data/lib/contrast/agent/reporting/reporting_utilities/reporter_client_utils.rb +144 -0
- data/lib/contrast/agent/reporting/reporting_utilities/reporting_storage.rb +66 -0
- data/lib/contrast/agent/reporting/reporting_utilities/response.rb +98 -0
- data/lib/contrast/agent/reporting/reporting_utilities/response_extractor.rb +176 -0
- data/lib/contrast/agent/reporting/reporting_utilities/response_handler.rb +117 -0
- data/lib/contrast/agent/reporting/reporting_utilities/response_handler_mode.rb +63 -0
- data/lib/contrast/agent/reporting/reporting_utilities/response_handler_utils.rb +342 -0
- data/lib/contrast/agent/reporting/server_settings_worker.rb +44 -0
- data/lib/contrast/agent/reporting/settings/application_settings.rb +61 -0
- data/lib/contrast/agent/reporting/settings/assess.rb +45 -0
- data/lib/contrast/agent/reporting/settings/assess_server_feature.rb +114 -0
- data/lib/contrast/agent/reporting/settings/bot_blocker.rb +68 -0
- data/lib/contrast/agent/reporting/settings/code_exclusion.rb +32 -0
- data/lib/contrast/agent/reporting/settings/exclusion_base.rb +51 -0
- data/lib/contrast/agent/reporting/settings/exclusions.rb +106 -0
- data/lib/contrast/agent/reporting/settings/helpers.rb +63 -0
- data/lib/contrast/agent/reporting/settings/input_exclusion.rb +43 -0
- data/lib/contrast/agent/reporting/settings/ip_filter.rb +35 -0
- data/lib/contrast/agent/reporting/settings/keyword.rb +74 -0
- data/lib/contrast/agent/reporting/settings/log_enhancer.rb +65 -0
- data/lib/contrast/agent/reporting/settings/protect.rb +106 -0
- data/lib/contrast/agent/reporting/settings/protect_server_feature.rb +227 -0
- data/lib/contrast/agent/reporting/settings/reaction.rb +39 -0
- data/lib/contrast/agent/reporting/settings/rule_definition.rb +66 -0
- data/lib/contrast/agent/reporting/settings/sampling.rb +46 -0
- data/lib/contrast/agent/reporting/settings/sanitizer.rb +38 -0
- data/lib/contrast/agent/reporting/settings/security_logger.rb +77 -0
- data/lib/contrast/agent/reporting/settings/sensitive_data_masking.rb +118 -0
- data/lib/contrast/agent/reporting/settings/sensitive_data_masking_rule.rb +65 -0
- data/lib/contrast/agent/reporting/settings/server_features.rb +95 -0
- data/lib/contrast/agent/reporting/settings/syslog.rb +205 -0
- data/lib/contrast/agent/reporting/settings/url_exclusion.rb +42 -0
- data/lib/contrast/agent/reporting/settings/validator.rb +17 -0
- data/lib/contrast/agent/request.rb +107 -411
- data/lib/contrast/agent/request_context.rb +78 -162
- data/lib/contrast/agent/request_context_extend.rb +85 -0
- data/lib/contrast/agent/request_handler.rb +41 -0
- data/lib/contrast/agent/response.rb +37 -165
- data/lib/contrast/agent/rule_set.rb +52 -0
- data/lib/contrast/agent/scope.rb +142 -20
- data/lib/contrast/agent/static_analysis.rb +51 -0
- data/lib/contrast/agent/telemetry/base.rb +155 -0
- data/lib/contrast/agent/telemetry/events/event.rb +35 -0
- data/lib/contrast/agent/telemetry/events/exceptions/obfuscate.rb +119 -0
- data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_base.rb +61 -0
- data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_event.rb +46 -0
- data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_message.rb +118 -0
- data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_message_exception.rb +86 -0
- data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_stack_frame.rb +67 -0
- data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exceptions.rb +19 -0
- data/lib/contrast/agent/telemetry/events/metric_event.rb +28 -0
- data/lib/contrast/agent/telemetry/events/startup_metrics_event.rb +123 -0
- data/lib/contrast/agent/thread.rb +4 -6
- data/lib/contrast/agent/thread_watcher.rb +117 -0
- data/lib/contrast/agent/tracepoint_hook.rb +19 -13
- data/lib/contrast/agent/version.rb +2 -2
- data/lib/contrast/agent/worker_thread.rb +42 -0
- data/lib/contrast/agent.rb +83 -50
- data/lib/contrast/agent_lib/api/command_injection.rb +46 -0
- data/lib/contrast/agent_lib/api/init.rb +101 -0
- data/lib/contrast/agent_lib/api/input_tracing.rb +267 -0
- data/lib/contrast/agent_lib/api/method_tempering.rb +29 -0
- data/lib/contrast/agent_lib/api/panic.rb +87 -0
- data/lib/contrast/agent_lib/api/path_semantic_file_security_bypass.rb +40 -0
- data/lib/contrast/agent_lib/interface.rb +260 -0
- data/lib/contrast/agent_lib/interface_base.rb +118 -0
- data/lib/contrast/agent_lib/return_types/eval_result.rb +44 -0
- data/lib/contrast/agent_lib/test.rb +29 -0
- data/lib/contrast/api/communication/connection_status.rb +59 -0
- data/lib/contrast/components/agent.rb +108 -36
- data/lib/contrast/components/api.rb +159 -0
- data/lib/contrast/components/app_context.rb +124 -134
- data/lib/contrast/components/app_context_extend.rb +53 -0
- data/lib/contrast/components/assess.rb +187 -24
- data/lib/contrast/components/assess_rules.rb +54 -0
- data/lib/contrast/components/base.rb +103 -0
- data/lib/contrast/components/config/sources.rb +95 -0
- data/lib/contrast/components/config.rb +182 -60
- data/lib/contrast/components/heap_dump.rb +77 -12
- data/lib/contrast/components/inventory.rb +37 -10
- data/lib/contrast/components/logger.rb +46 -76
- data/lib/contrast/components/polling.rb +36 -0
- data/lib/contrast/components/protect.rb +142 -16
- data/lib/contrast/components/ruby_component.rb +96 -0
- data/lib/contrast/components/sampling.rb +156 -15
- data/lib/contrast/components/scope.rb +116 -85
- data/lib/contrast/components/security_logger.rb +36 -0
- data/lib/contrast/components/settings.rb +197 -90
- data/lib/contrast/config/api_proxy_configuration.rb +27 -0
- data/lib/contrast/config/base_configuration.rb +20 -94
- data/lib/contrast/config/certification_configuration.rb +47 -0
- data/lib/contrast/config/config.rb +46 -0
- data/lib/contrast/config/diagnostics.rb +114 -0
- data/lib/contrast/config/diagnostics_tools.rb +98 -0
- data/lib/contrast/config/effective_config.rb +65 -0
- data/lib/contrast/config/effective_config_value.rb +32 -0
- data/lib/contrast/config/env_variables.rb +18 -0
- data/lib/contrast/config/exception_configuration.rb +34 -12
- data/lib/contrast/config/protect_rule_configuration.rb +45 -24
- data/lib/contrast/config/protect_rules_configuration.rb +97 -22
- data/lib/contrast/config/request_audit_configuration.rb +57 -0
- data/lib/contrast/config/server_configuration.rb +67 -15
- data/lib/contrast/config.rb +6 -22
- data/lib/contrast/configuration.rb +231 -108
- data/lib/contrast/extension/assess/array.rb +75 -0
- data/lib/contrast/extension/assess/erb.rb +61 -0
- data/lib/contrast/extension/assess/eval_trigger.rb +47 -0
- data/lib/contrast/{core_extensions → extension}/assess/exec_trigger.rb +9 -21
- data/lib/contrast/extension/assess/fiber.rb +95 -0
- data/lib/contrast/extension/assess/hash.rb +33 -0
- data/lib/contrast/extension/assess/kernel.rb +124 -0
- data/lib/contrast/extension/assess/marshal.rb +80 -0
- data/lib/contrast/extension/assess/regexp.rb +71 -0
- data/lib/contrast/extension/assess/string.rb +84 -0
- data/lib/contrast/extension/assess.rb +47 -0
- data/lib/contrast/{core_extensions → extension}/delegator.rb +3 -1
- data/lib/contrast/extension/extension.rb +59 -0
- data/lib/contrast/extension/inventory.rb +21 -0
- data/lib/contrast/extension/module.rb +16 -0
- data/lib/contrast/extension/object.rb +19 -0
- data/lib/contrast/extension/protect/psych.rb +7 -0
- data/lib/contrast/{core_extensions → extension}/protect.rb +6 -6
- data/lib/contrast/extension/thread.rb +50 -0
- data/lib/contrast/framework/base_support.rb +78 -0
- data/lib/contrast/framework/grape/support.rb +176 -0
- data/lib/contrast/framework/manager.rb +158 -0
- data/lib/contrast/framework/manager_extend.rb +50 -0
- data/lib/contrast/framework/rack/patch/session_cookie.rb +107 -0
- data/lib/contrast/framework/rack/patch/support.rb +26 -0
- data/lib/contrast/framework/rack/support.rb +23 -0
- data/lib/contrast/framework/rails/patch/action_controller_live_buffer.rb +46 -0
- data/lib/contrast/framework/rails/patch/assess_configuration.rb +98 -0
- data/lib/contrast/framework/rails/patch/rails_application_configuration.rb +31 -0
- data/lib/contrast/framework/rails/patch/support.rb +46 -0
- data/lib/contrast/framework/rails/railtie.rb +33 -0
- data/lib/contrast/framework/rails/support.rb +187 -0
- data/lib/contrast/framework/sinatra/support.rb +165 -0
- data/lib/contrast/funchook/funchook.rb +45 -0
- data/lib/contrast/logger/aliased_logging.rb +101 -0
- data/lib/contrast/logger/application.rb +84 -0
- data/lib/contrast/logger/cef_log.rb +169 -0
- data/lib/contrast/logger/format.rb +61 -0
- data/lib/contrast/logger/log.rb +90 -0
- data/lib/contrast/logger/request.rb +25 -0
- data/lib/contrast/logger/time.rb +57 -0
- data/lib/contrast/security_exception.rb +2 -2
- data/lib/contrast/tasks/config.rb +144 -0
- data/lib/contrast/utils/assess/event_limit_utils.rb +134 -0
- data/lib/contrast/utils/assess/object_store.rb +36 -0
- data/lib/contrast/utils/assess/propagation_method_utils.rb +155 -0
- data/lib/contrast/utils/assess/property/tagged_utils.rb +165 -0
- data/lib/contrast/utils/assess/sampling_util.rb +11 -17
- data/lib/contrast/utils/assess/source_method_utils.rb +74 -0
- data/lib/contrast/utils/assess/split_utils.rb +23 -0
- data/lib/contrast/utils/assess/tracking_util.rb +95 -19
- data/lib/contrast/utils/assess/trigger_method_utils.rb +132 -0
- data/lib/contrast/utils/class_util.rb +125 -38
- data/lib/contrast/utils/duck_utils.rb +54 -43
- data/lib/contrast/utils/env_configuration_item.rb +4 -3
- data/lib/contrast/utils/findings.rb +66 -0
- data/lib/contrast/utils/hash_digest.rb +52 -100
- data/lib/contrast/utils/hash_digest_extend.rb +129 -0
- data/lib/contrast/utils/head_dump_utils_extend.rb +74 -0
- data/lib/contrast/utils/heap_dump_util.rb +44 -88
- data/lib/contrast/utils/input_classification_base.rb +155 -0
- data/lib/contrast/utils/invalid_configuration_util.rb +36 -50
- data/lib/contrast/utils/io_util.rb +47 -51
- data/lib/contrast/utils/job_servers_running.rb +47 -0
- data/lib/contrast/utils/log_utils.rb +254 -0
- data/lib/contrast/utils/lru_cache.rb +48 -0
- data/lib/contrast/utils/metrics_hash.rb +59 -0
- data/lib/contrast/utils/middleware_utils.rb +89 -0
- data/lib/contrast/utils/net_http_base.rb +167 -0
- data/lib/contrast/utils/object_share.rb +7 -48
- data/lib/contrast/utils/os.rb +14 -24
- data/lib/contrast/utils/patching/policy/patch_utils.rb +175 -0
- data/lib/contrast/utils/patching/policy/patcher_utils.rb +54 -0
- data/lib/contrast/utils/reporting/application_activity_batch_utils.rb +81 -0
- data/lib/contrast/utils/request_utils.rb +96 -0
- data/lib/contrast/utils/resource_loader.rb +2 -2
- data/lib/contrast/utils/response_utils.rb +79 -0
- data/lib/contrast/utils/routes_sent.rb +60 -0
- data/lib/contrast/utils/sha256_builder.rb +9 -21
- data/lib/contrast/utils/stack_trace_utils.rb +68 -184
- data/lib/contrast/utils/string_utils.rb +82 -52
- data/lib/contrast/utils/tag_util.rb +58 -44
- data/lib/contrast/utils/telemetry.rb +103 -0
- data/lib/contrast/utils/telemetry_client.rb +107 -0
- data/lib/contrast/utils/telemetry_hash.rb +65 -0
- data/lib/contrast/utils/telemetry_identifier.rb +153 -0
- data/lib/contrast/utils/thread_tracker.rb +27 -23
- data/lib/contrast/utils/timer.rb +20 -55
- data/lib/contrast-agent.rb +2 -2
- data/lib/contrast.rb +105 -43
- data/resources/assess/policy.json +523 -137
- data/resources/deadzone/policy.json +280 -10
- data/resources/inventory/policy.json +2 -2
- data/resources/protect/policy.json +30 -17
- data/ruby-agent.gemspec +114 -45
- data/sonar-project.properties +9 -0
- metadata +694 -287
- data/exe/contrast_service +0 -29
- data/ext/cs__assess_active_record_named/cs__active_record_named.c +0 -47
- data/ext/cs__assess_active_record_named/cs__active_record_named.h +0 -10
- data/ext/cs__assess_active_record_named/extconf.rb +0 -2
- data/ext/cs__assess_regexp_track/cs__assess_regexp_track.c +0 -63
- data/ext/cs__assess_regexp_track/cs__assess_regexp_track.h +0 -29
- data/ext/cs__assess_regexp_track/extconf.rb +0 -2
- data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.c +0 -31
- data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.h +0 -13
- data/ext/cs__assess_string_interpolation26/extconf.rb +0 -2
- data/ext/cs__protect_kernel/cs__protect_kernel.c +0 -37
- data/ext/cs__protect_kernel/cs__protect_kernel.h +0 -11
- data/ext/cs__protect_kernel/extconf.rb +0 -2
- data/funchook/Makefile +0 -29
- data/funchook/autom4te.cache/output.0 +0 -4976
- data/funchook/autom4te.cache/requests +0 -78
- data/funchook/autom4te.cache/traces.0 +0 -364
- data/funchook/config.log +0 -490
- data/funchook/config.status +0 -1016
- data/funchook/configure +0 -4976
- data/funchook/src/Makefile +0 -70
- data/funchook/src/config.h +0 -101
- data/funchook/src/config.h.in +0 -100
- data/funchook/src/decoder.o +0 -0
- data/funchook/src/distorm.o +0 -0
- data/funchook/src/funchook.o +0 -0
- data/funchook/src/funchook_io.o +0 -0
- data/funchook/src/funchook_syscall.o +0 -0
- data/funchook/src/funchook_unix.o +0 -0
- data/funchook/src/funchook_x86.o +0 -0
- data/funchook/src/instructions.o +0 -0
- data/funchook/src/insts.o +0 -0
- data/funchook/src/libfunchook.so +0 -0
- data/funchook/src/mnemonics.o +0 -0
- data/funchook/src/operands.o +0 -0
- data/funchook/src/os_func.o +0 -0
- data/funchook/src/os_func_unix.o +0 -0
- data/funchook/src/prefix.o +0 -0
- data/funchook/src/printf_base.o +0 -0
- data/funchook/src/textdefs.o +0 -0
- data/funchook/src/wstring.o +0 -0
- data/funchook/test/Makefile +0 -43
- data/funchook/test/funchook_test +0 -0
- data/funchook/test/libfunchook_test.so +0 -0
- data/funchook/test/test_main.o +0 -0
- data/funchook/test/x86_64_test.o +0 -0
- data/lib/contrast/agent/assess/adjusted_span.rb +0 -25
- data/lib/contrast/agent/assess/class_reverter.rb +0 -82
- data/lib/contrast/agent/assess/contrast_event.rb +0 -398
- data/lib/contrast/agent/assess/frozen_properties.rb +0 -41
- data/lib/contrast/agent/assess/insulator.rb +0 -53
- data/lib/contrast/agent/assess/policy/rewriter_patch.rb +0 -79
- data/lib/contrast/agent/assess/rule/base.rb +0 -72
- data/lib/contrast/agent/assess/rule/csrf/csrf_action.rb +0 -28
- data/lib/contrast/agent/assess/rule/csrf/csrf_applicator.rb +0 -69
- data/lib/contrast/agent/assess/rule/csrf/csrf_watcher.rb +0 -132
- data/lib/contrast/agent/assess/rule/csrf.rb +0 -66
- data/lib/contrast/agent/assess/rule/redos.rb +0 -68
- data/lib/contrast/agent/assess/rule/response_scanning_rule.rb +0 -47
- data/lib/contrast/agent/assess/rule/response_watcher.rb +0 -36
- data/lib/contrast/agent/assess/rule/watcher.rb +0 -36
- data/lib/contrast/agent/assess/rule.rb +0 -18
- data/lib/contrast/agent/class_reopener.rb +0 -195
- data/lib/contrast/agent/feature_state.rb +0 -379
- data/lib/contrast/agent/logger_manager.rb +0 -116
- data/lib/contrast/agent/patching/policy/policy_unpatcher.rb +0 -28
- data/lib/contrast/agent/protect/rule/csrf/csrf_evaluator.rb +0 -103
- data/lib/contrast/agent/protect/rule/csrf/csrf_token_injector.rb +0 -85
- data/lib/contrast/agent/protect/rule/csrf.rb +0 -118
- data/lib/contrast/agent/railtie.rb +0 -30
- data/lib/contrast/agent/reaction_processor.rb +0 -47
- data/lib/contrast/agent/require_state.rb +0 -61
- data/lib/contrast/agent/rewriter.rb +0 -244
- data/lib/contrast/agent/service_heartbeat.rb +0 -37
- data/lib/contrast/agent/settings_state.rb +0 -148
- data/lib/contrast/agent/socket_client.rb +0 -125
- data/lib/contrast/api/connection_status.rb +0 -49
- data/lib/contrast/api/dtm_pb.rb +0 -718
- data/lib/contrast/api/settings_pb.rb +0 -416
- data/lib/contrast/api/socket.rb +0 -43
- data/lib/contrast/api/speedracer.rb +0 -206
- data/lib/contrast/api/tcp_socket.rb +0 -31
- data/lib/contrast/api/unix_socket.rb +0 -25
- data/lib/contrast/api.rb +0 -17
- data/lib/contrast/common_agent_configuration.rb +0 -86
- data/lib/contrast/components/contrast_service.rb +0 -113
- data/lib/contrast/components/interface.rb +0 -178
- data/lib/contrast/config/agent_configuration.rb +0 -24
- data/lib/contrast/config/application_configuration.rb +0 -27
- data/lib/contrast/config/assess_configuration.rb +0 -22
- data/lib/contrast/config/assess_rules_configuration.rb +0 -18
- data/lib/contrast/config/default_value.rb +0 -16
- data/lib/contrast/config/heap_dump_configuration.rb +0 -23
- data/lib/contrast/config/inventory_configuration.rb +0 -20
- data/lib/contrast/config/logger_configuration.rb +0 -20
- data/lib/contrast/config/protect_configuration.rb +0 -20
- data/lib/contrast/config/root_configuration.rb +0 -26
- data/lib/contrast/config/ruby_configuration.rb +0 -39
- data/lib/contrast/config/sampling_configuration.rb +0 -22
- data/lib/contrast/config/service_configuration.rb +0 -22
- data/lib/contrast/core_extensions/assess/array.rb +0 -58
- data/lib/contrast/core_extensions/assess/assess_extension.rb +0 -145
- data/lib/contrast/core_extensions/assess/basic_object.rb +0 -15
- data/lib/contrast/core_extensions/assess/erb.rb +0 -42
- data/lib/contrast/core_extensions/assess/fiber.rb +0 -125
- data/lib/contrast/core_extensions/assess/hash.rb +0 -22
- data/lib/contrast/core_extensions/assess/kernel.rb +0 -95
- data/lib/contrast/core_extensions/assess/module.rb +0 -14
- data/lib/contrast/core_extensions/assess/regexp.rb +0 -206
- data/lib/contrast/core_extensions/assess/string.rb +0 -75
- data/lib/contrast/core_extensions/assess/tilt_template_trigger.rb +0 -73
- data/lib/contrast/core_extensions/assess.rb +0 -51
- data/lib/contrast/core_extensions/eval_trigger.rb +0 -52
- data/lib/contrast/core_extensions/inventory/datastores.rb +0 -37
- data/lib/contrast/core_extensions/inventory.rb +0 -22
- data/lib/contrast/core_extensions/module.rb +0 -42
- data/lib/contrast/core_extensions/object.rb +0 -27
- data/lib/contrast/core_extensions/protect/applies_command_injection_rule.rb +0 -70
- data/lib/contrast/core_extensions/protect/applies_deserialization_rule.rb +0 -58
- data/lib/contrast/core_extensions/protect/applies_no_sqli_rule.rb +0 -81
- data/lib/contrast/core_extensions/protect/applies_path_traversal_rule.rb +0 -119
- data/lib/contrast/core_extensions/protect/applies_sqli_rule.rb +0 -63
- data/lib/contrast/core_extensions/protect/applies_xxe_rule.rb +0 -141
- data/lib/contrast/core_extensions/protect/kernel.rb +0 -30
- data/lib/contrast/core_extensions/protect/psych.rb +0 -7
- data/lib/contrast/core_extensions/thread.rb +0 -31
- data/lib/contrast/internal_exception.rb +0 -8
- data/lib/contrast/rails_extensions/assess/action_controller_inheritance.rb +0 -48
- data/lib/contrast/rails_extensions/assess/active_record.rb +0 -32
- data/lib/contrast/rails_extensions/assess/active_record_named.rb +0 -61
- data/lib/contrast/rails_extensions/assess/configuration.rb +0 -26
- data/lib/contrast/rails_extensions/buffer.rb +0 -30
- data/lib/contrast/rails_extensions/rack.rb +0 -45
- data/lib/contrast/sinatra_extensions/assess/cookie.rb +0 -26
- data/lib/contrast/sinatra_extensions/inventory/sinatra_base.rb +0 -59
- data/lib/contrast/tasks/service.rb +0 -95
- data/lib/contrast/utils/boolean_util.rb +0 -33
- data/lib/contrast/utils/cache.rb +0 -69
- data/lib/contrast/utils/comment_range.rb +0 -19
- data/lib/contrast/utils/data_store_util.rb +0 -23
- data/lib/contrast/utils/environment_util.rb +0 -152
- data/lib/contrast/utils/freeze_util.rb +0 -36
- data/lib/contrast/utils/gemfile_reader.rb +0 -191
- data/lib/contrast/utils/inventory_util.rb +0 -126
- data/lib/contrast/utils/operating_environment.rb +0 -38
- data/lib/contrast/utils/path_util.rb +0 -151
- data/lib/contrast/utils/performs_logging.rb +0 -152
- data/lib/contrast/utils/preflight_util.rb +0 -13
- data/lib/contrast/utils/prevent_serialization.rb +0 -52
- data/lib/contrast/utils/rack_assess_session_cookie.rb +0 -104
- data/lib/contrast/utils/rails_assess_configuration.rb +0 -95
- data/lib/contrast/utils/random_util.rb +0 -22
- data/lib/contrast/utils/ruby_ast_rewriter.rb +0 -74
- data/lib/contrast/utils/scope_util.rb +0 -99
- data/lib/contrast/utils/service_response_util.rb +0 -116
- data/lib/contrast/utils/service_sender_util.rb +0 -98
- data/lib/contrast/utils/sinatra_helper.rb +0 -49
- data/resources/csrf/inject.js +0 -44
- data/resources/factory-bot-spec/spec_helper.rb +0 -30
- data/resources/rubocops/kernel/catch_cop.rb +0 -37
- data/resources/rubocops/kernel/require_cop.rb +0 -37
- data/resources/rubocops/kernel/require_relative_cop.rb +0 -33
- data/resources/rubocops/module/autoload_cop.rb +0 -37
- data/resources/rubocops/module/const_defined_cop.rb +0 -37
- data/resources/rubocops/module/const_get_cop.rb +0 -37
- data/resources/rubocops/module/const_set_cop.rb +0 -37
- data/resources/rubocops/module/constants_cop.rb +0 -37
- data/resources/rubocops/module/name_cop.rb +0 -37
- data/resources/rubocops/object/class_cop.rb +0 -37
- data/resources/rubocops/object/freeze_cop.rb +0 -37
- data/resources/rubocops/object/frozen_cop.rb +0 -37
- data/resources/rubocops/object/is_a_cop.rb +0 -37
- data/resources/rubocops/object/method_cop.rb +0 -37
- data/resources/rubocops/object/respond_to_cop.rb +0 -37
- data/resources/rubocops/object/singleton_class_cop.rb +0 -37
- data/resources/rubocops/regexp/spelling_cop.rb +0 -44
- data/resources/rubocops/thread/new_cop.rb +0 -39
- data/resources/ruby-spec/ancestors_spec.rb +0 -70
- data/resources/ruby-spec/modulo_spec.rb +0 -831
- data/resources/ruby-spec/parameters_spec.rb +0 -261
- data/resources/ruby-spec/ruby_spec_spec_helper.rb +0 -35
- data/service_executables/.gitkeep +0 -0
- data/service_executables/VERSION +0 -1
- data/service_executables/linux/contrast-service +0 -0
- data/service_executables/mac/contrast-service +0 -0
- data/shared_libraries/funchook.h +0 -123
- data/shared_libraries/libfunchook.so +0 -0
@@ -1,416 +0,0 @@
|
|
1
|
-
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
2
|
-
# source: settings.proto
|
3
|
-
|
4
|
-
require 'google/protobuf'
|
5
|
-
|
6
|
-
Google::Protobuf::DescriptorPool.generated_pool.build do
|
7
|
-
add_message "contrast.api.settings.ApplicationState" do
|
8
|
-
optional :created_ms, :int64, 1
|
9
|
-
optional :app_name, :string, 2
|
10
|
-
optional :app_language, :string, 3
|
11
|
-
optional :app_path, :string, 4
|
12
|
-
optional :app_group, :string, 16
|
13
|
-
optional :app_tags, :string, 17
|
14
|
-
optional :app_version, :string, 18
|
15
|
-
optional :server_features, :message, 6, "contrast.api.settings.ServerFeatures"
|
16
|
-
optional :application_settings, :message, 7, "contrast.api.settings.ApplicationSettings"
|
17
|
-
optional :accumulator_settings, :message, 8, "contrast.api.settings.AccumulatorSettings"
|
18
|
-
optional :server_name, :string, 9
|
19
|
-
optional :server_path, :string, 10
|
20
|
-
optional :server_type, :string, 11
|
21
|
-
optional :server_tags, :string, 13
|
22
|
-
optional :server_environment, :string, 14
|
23
|
-
optional :server_version, :string, 15
|
24
|
-
optional :agent_version, :string, 12
|
25
|
-
end
|
26
|
-
add_message "contrast.api.settings.AgentSettings" do
|
27
|
-
optional :sent_ms, :int64, 1
|
28
|
-
optional :server_features, :message, 2, "contrast.api.settings.ServerFeatures"
|
29
|
-
optional :application_settings, :message, 3, "contrast.api.settings.ApplicationSettings"
|
30
|
-
optional :accumulator_settings, :message, 4, "contrast.api.settings.AccumulatorSettings"
|
31
|
-
optional :protect_state, :message, 5, "contrast.api.settings.ProtectState"
|
32
|
-
optional :input_analysis, :message, 6, "contrast.api.settings.InputAnalysis"
|
33
|
-
end
|
34
|
-
add_message "contrast.api.settings.ProtectState" do
|
35
|
-
optional :uuid, :string, 1
|
36
|
-
optional :track_request, :bool, 4
|
37
|
-
optional :security_exception, :bool, 2
|
38
|
-
optional :security_message, :string, 3
|
39
|
-
end
|
40
|
-
add_message "contrast.api.settings.ServerFeatures" do
|
41
|
-
optional :cache, :bool, 1
|
42
|
-
optional :log_file, :string, 2
|
43
|
-
optional :log_level, :string, 3
|
44
|
-
optional :inventory, :message, 4, "contrast.api.settings.InventoryFeatures"
|
45
|
-
optional :assess, :message, 5, "contrast.api.settings.AssessFeatures"
|
46
|
-
optional :defend, :message, 6, "contrast.api.settings.DefendFeatures"
|
47
|
-
optional :instrumentation_mode, :enum, 7, "contrast.api.settings.ServerFeatures.InstrumentationMode"
|
48
|
-
optional :contrast_service, :message, 8, "contrast.api.settings.ContrastServiceData"
|
49
|
-
end
|
50
|
-
add_enum "contrast.api.settings.ServerFeatures.InstrumentationMode" do
|
51
|
-
value :UNDEFINED, 0
|
52
|
-
value :AGENT_CONFIG, 1
|
53
|
-
value :DUPLEX, 2
|
54
|
-
value :PROFILER, 3
|
55
|
-
end
|
56
|
-
add_message "contrast.api.settings.ContrastServiceData" do
|
57
|
-
optional :version, :string, 1
|
58
|
-
end
|
59
|
-
add_message "contrast.api.settings.ApplicationSettings" do
|
60
|
-
repeated :virtual_patches, :message, 2, "contrast.api.settings.VirtualPatch"
|
61
|
-
repeated :protection_rules, :message, 3, "contrast.api.settings.ProtectionRule"
|
62
|
-
repeated :exclusions, :message, 5, "contrast.api.settings.Exclusion"
|
63
|
-
repeated :disabled_assess_rules, :string, 6
|
64
|
-
repeated :reactions, :message, 7, "contrast.api.settings.Reaction"
|
65
|
-
optional :session_id, :string, 8
|
66
|
-
optional :sqli_settings, :message, 9, "contrast.api.settings.SqlInjectionSettings"
|
67
|
-
end
|
68
|
-
add_message "contrast.api.settings.SqlInjectionSettings" do
|
69
|
-
optional :detect_tautologies, :bool, 1
|
70
|
-
optional :detect_chained_queries, :bool, 2
|
71
|
-
optional :detect_suspicious_unions, :bool, 3
|
72
|
-
optional :detect_dangerous_functions, :bool, 4
|
73
|
-
end
|
74
|
-
add_message "contrast.api.settings.Reaction" do
|
75
|
-
optional :message, :string, 1
|
76
|
-
optional :log_level, :enum, 2, "contrast.api.settings.LogLevel"
|
77
|
-
optional :operation, :enum, 3, "contrast.api.settings.Reaction.Operation"
|
78
|
-
end
|
79
|
-
add_enum "contrast.api.settings.Reaction.Operation" do
|
80
|
-
value :NOOP, 0
|
81
|
-
value :DISABLE, 1
|
82
|
-
value :INVENTORY, 2
|
83
|
-
end
|
84
|
-
add_message "contrast.api.settings.AccumulatorSettings" do
|
85
|
-
map :accumulators, :string, :message, 1, "contrast.api.settings.Accumulator"
|
86
|
-
end
|
87
|
-
add_message "contrast.api.settings.InventoryFeatures" do
|
88
|
-
optional :libraries, :bool, 1
|
89
|
-
optional :activity, :bool, 2
|
90
|
-
optional :monitor_db, :bool, 3
|
91
|
-
optional :monitor_ldap, :bool, 4
|
92
|
-
optional :monitor_web_calls, :bool, 5
|
93
|
-
end
|
94
|
-
add_message "contrast.api.settings.AssessFeatures" do
|
95
|
-
optional :enabled, :bool, 1
|
96
|
-
optional :dynamic_sources, :bool, 2
|
97
|
-
optional :sources, :bool, 3
|
98
|
-
optional :rules, :bool, 4
|
99
|
-
optional :propagators, :bool, 5
|
100
|
-
optional :taggers, :bool, 6
|
101
|
-
optional :response_scanning, :bool, 7
|
102
|
-
optional :stacktraces, :enum, 8, "contrast.api.settings.AssessFeatures.SaveStacktrace"
|
103
|
-
optional :validator_scopes, :bool, 9
|
104
|
-
optional :identity_tagging, :bool, 10
|
105
|
-
repeated :sanitizers, :message, 11, "contrast.api.settings.CustomRuleFeature"
|
106
|
-
repeated :validators, :message, 12, "contrast.api.settings.CustomRuleFeature"
|
107
|
-
repeated :disabled_rules, :string, 13
|
108
|
-
optional :sampling, :message, 14, "contrast.api.settings.Sampling"
|
109
|
-
map :dynamic_sources_map, :string, :message, 19, "contrast.api.settings.DynamicSource"
|
110
|
-
end
|
111
|
-
add_enum "contrast.api.settings.AssessFeatures.SaveStacktrace" do
|
112
|
-
value :UNDEFINED, 0
|
113
|
-
value :ALL, 1
|
114
|
-
value :SOME, 2
|
115
|
-
value :NONE, 3
|
116
|
-
end
|
117
|
-
add_message "contrast.api.settings.CustomRuleFeature" do
|
118
|
-
optional :api, :string, 1
|
119
|
-
repeated :tags, :string, 2
|
120
|
-
repeated :rules, :string, 3
|
121
|
-
end
|
122
|
-
add_message "contrast.api.settings.Sampling" do
|
123
|
-
optional :enabled, :bool, 1
|
124
|
-
optional :baseline, :int32, 2
|
125
|
-
optional :window_ms, :int32, 3
|
126
|
-
optional :request_frequency, :int32, 4
|
127
|
-
optional :response_frequency, :int32, 5
|
128
|
-
end
|
129
|
-
add_message "contrast.api.settings.DynamicSource" do
|
130
|
-
optional :class_name, :string, 1
|
131
|
-
optional :method_name, :string, 2
|
132
|
-
optional :instance_method, :bool, 3
|
133
|
-
optional :target, :string, 4
|
134
|
-
map :properties, :string, :string, 6
|
135
|
-
end
|
136
|
-
add_message "contrast.api.settings.DefendFeatures" do
|
137
|
-
optional :enabled, :bool, 1
|
138
|
-
optional :bot_blocker, :bool, 2
|
139
|
-
repeated :bot_blockers, :message, 3, "contrast.api.settings.BotBlocker"
|
140
|
-
repeated :ip_blacklists, :message, 4, "contrast.api.settings.IpFilter"
|
141
|
-
repeated :ip_whitelists, :message, 5, "contrast.api.settings.IpFilter"
|
142
|
-
repeated :log_enhancers, :message, 6, "contrast.api.settings.LogEnhancer"
|
143
|
-
repeated :rule_definitions, :message, 7, "contrast.api.settings.RuleDefinition"
|
144
|
-
optional :syslog, :message, 8, "contrast.api.settings.Syslog"
|
145
|
-
optional :auth, :message, 9, "contrast.api.settings.Auth"
|
146
|
-
end
|
147
|
-
add_message "contrast.api.settings.Syslog" do
|
148
|
-
optional :enabled, :bool, 1
|
149
|
-
optional :ip_address, :string, 2
|
150
|
-
optional :port, :int32, 3
|
151
|
-
optional :facility_code, :int32, 4
|
152
|
-
optional :connection_type, :enum, 5, "contrast.api.settings.Syslog.ConnectionType"
|
153
|
-
optional :severity_exploited, :enum, 6, "contrast.api.settings.Syslog.Severity"
|
154
|
-
optional :severity_blocked, :enum, 7, "contrast.api.settings.Syslog.Severity"
|
155
|
-
optional :severity_probed, :enum, 8, "contrast.api.settings.Syslog.Severity"
|
156
|
-
optional :protocol, :string, 9
|
157
|
-
optional :host, :string, 10
|
158
|
-
end
|
159
|
-
add_enum "contrast.api.settings.Syslog.ConnectionType" do
|
160
|
-
value :UNENCRYPTED, 0
|
161
|
-
value :ENCRYOTED, 1
|
162
|
-
end
|
163
|
-
add_enum "contrast.api.settings.Syslog.Severity" do
|
164
|
-
value :UNDEFINED, 0
|
165
|
-
value :ALERT, 1
|
166
|
-
value :CRITICAL, 2
|
167
|
-
value :ERROR, 3
|
168
|
-
value :WARNING, 4
|
169
|
-
value :NOTICE, 5
|
170
|
-
value :INFO, 6
|
171
|
-
value :DEBUG, 7
|
172
|
-
end
|
173
|
-
add_message "contrast.api.settings.BotBlocker" do
|
174
|
-
optional :bot, :string, 1
|
175
|
-
optional :case_sensitive, :bool, 2
|
176
|
-
optional :start_anchor, :bool, 3
|
177
|
-
end
|
178
|
-
add_message "contrast.api.settings.IpFilter" do
|
179
|
-
optional :expires, :bool, 1
|
180
|
-
optional :expires_at_ms, :int64, 2
|
181
|
-
optional :ip, :string, 3
|
182
|
-
optional :name, :string, 4
|
183
|
-
optional :uuid, :string, 5
|
184
|
-
end
|
185
|
-
add_message "contrast.api.settings.LogEnhancer" do
|
186
|
-
optional :id, :int64, 1
|
187
|
-
optional :name, :string, 2
|
188
|
-
optional :api, :string, 3
|
189
|
-
optional :format, :string, 4
|
190
|
-
optional :log_level, :enum, 5, "contrast.api.settings.LogEnhancer.LogLevel"
|
191
|
-
optional :log_type, :enum, 6, "contrast.api.settings.LogEnhancer.LogType"
|
192
|
-
end
|
193
|
-
add_enum "contrast.api.settings.LogEnhancer.LogLevel" do
|
194
|
-
value :TRACE, 0
|
195
|
-
value :DEBUG, 1
|
196
|
-
value :INFO, 2
|
197
|
-
value :WARN, 3
|
198
|
-
value :ERROR, 4
|
199
|
-
end
|
200
|
-
add_enum "contrast.api.settings.LogEnhancer.LogType" do
|
201
|
-
value :LOG_AUDIT, 0
|
202
|
-
value :LOG_ERROR, 1
|
203
|
-
value :LOG_SECURITY, 2
|
204
|
-
end
|
205
|
-
add_message "contrast.api.settings.RuleDefinition" do
|
206
|
-
optional :name, :string, 1
|
207
|
-
repeated :keywords, :message, 2, "contrast.api.settings.StringDefinition"
|
208
|
-
repeated :patterns, :message, 3, "contrast.api.settings.StringDefinition"
|
209
|
-
end
|
210
|
-
add_message "contrast.api.settings.StringDefinition" do
|
211
|
-
optional :type, :enum, 1, "contrast.api.settings.StringDefinition.Type"
|
212
|
-
optional :rule, :string, 2
|
213
|
-
optional :id, :string, 3
|
214
|
-
optional :value, :string, 4
|
215
|
-
optional :downcase, :string, 7
|
216
|
-
optional :case_sensitive, :bool, 5
|
217
|
-
optional :score, :int32, 6
|
218
|
-
end
|
219
|
-
add_enum "contrast.api.settings.StringDefinition.Type" do
|
220
|
-
value :KEYWORD, 0
|
221
|
-
value :PATTERN, 1
|
222
|
-
end
|
223
|
-
add_message "contrast.api.settings.Exclusion" do
|
224
|
-
optional :type, :enum, 1, "contrast.api.settings.Exclusion.ExclusionType"
|
225
|
-
optional :name, :string, 2
|
226
|
-
optional :match_strategy, :enum, 3, "contrast.api.settings.Exclusion.MatchStrategy"
|
227
|
-
repeated :modes, :string, 4
|
228
|
-
repeated :protection_rules, :string, 5
|
229
|
-
repeated :assessment_rules, :string, 6
|
230
|
-
repeated :urls, :string, 7
|
231
|
-
repeated :blacklist, :string, 8
|
232
|
-
optional :input_type, :enum, 9, "contrast.api.settings.Exclusion.InputType"
|
233
|
-
optional :input_name, :string, 10
|
234
|
-
optional :assess, :bool, 11
|
235
|
-
optional :protect, :bool, 12
|
236
|
-
end
|
237
|
-
add_enum "contrast.api.settings.Exclusion.ExclusionType" do
|
238
|
-
value :URL, 0
|
239
|
-
value :INPUT, 1
|
240
|
-
value :CODE, 2
|
241
|
-
end
|
242
|
-
add_enum "contrast.api.settings.Exclusion.InputType" do
|
243
|
-
value :UNDEFINED, 0
|
244
|
-
value :COOKIE, 1
|
245
|
-
value :PARAMETER, 2
|
246
|
-
value :HEADER, 3
|
247
|
-
value :BODY, 4
|
248
|
-
value :QUERYSTRING, 5
|
249
|
-
end
|
250
|
-
add_enum "contrast.api.settings.Exclusion.MatchStrategy" do
|
251
|
-
value :ALL, 0
|
252
|
-
value :ONLY, 1
|
253
|
-
end
|
254
|
-
add_message "contrast.api.settings.VirtualPatch" do
|
255
|
-
optional :name, :string, 1
|
256
|
-
optional :uuid, :string, 2
|
257
|
-
optional :key, :string, 3
|
258
|
-
repeated :headers, :message, 4, "contrast.api.settings.VirtualPatchCondition"
|
259
|
-
repeated :parameters, :message, 5, "contrast.api.settings.VirtualPatchCondition"
|
260
|
-
repeated :urls, :message, 6, "contrast.api.settings.VirtualPatchCondition"
|
261
|
-
repeated :conditions, :message, 7, "contrast.api.settings.VirtualPatchCondition"
|
262
|
-
end
|
263
|
-
add_message "contrast.api.settings.VirtualPatchCondition" do
|
264
|
-
optional :name, :string, 2
|
265
|
-
optional :value, :string, 3
|
266
|
-
optional :input_type, :enum, 4, "contrast.api.settings.VirtualPatchCondition.InputType"
|
267
|
-
optional :evaluation, :enum, 5, "contrast.api.settings.VirtualPatchCondition.Evaluation"
|
268
|
-
end
|
269
|
-
add_enum "contrast.api.settings.VirtualPatchCondition.InputType" do
|
270
|
-
value :UNKNOWN_INPUT, 0
|
271
|
-
value :USERAGENT, 1
|
272
|
-
value :REFERER, 2
|
273
|
-
value :URL, 3
|
274
|
-
value :PARAMETER, 4
|
275
|
-
value :HEADER, 5
|
276
|
-
value :CODE, 6
|
277
|
-
end
|
278
|
-
add_enum "contrast.api.settings.VirtualPatchCondition.Evaluation" do
|
279
|
-
value :UNKNOWN_EVALUATION, 0
|
280
|
-
value :MATCHES, 1
|
281
|
-
value :DOESNT_MATCH, 2
|
282
|
-
value :CONTAINS, 3
|
283
|
-
value :DOESNT_CONTAIN, 4
|
284
|
-
value :EQUALS, 5
|
285
|
-
value :DOESNT_EQUAL, 6
|
286
|
-
end
|
287
|
-
add_message "contrast.api.settings.ProtectionRule" do
|
288
|
-
optional :id, :string, 1
|
289
|
-
optional :name, :string, 2
|
290
|
-
optional :mode, :enum, 3, "contrast.api.settings.ProtectionRule.Mode"
|
291
|
-
end
|
292
|
-
add_enum "contrast.api.settings.ProtectionRule.Mode" do
|
293
|
-
value :NO_ACTION, 0
|
294
|
-
value :MONITOR, 1
|
295
|
-
value :BLOCK, 2
|
296
|
-
value :BLOCK_AT_PERIMETER, 3
|
297
|
-
value :PERMIT, 4
|
298
|
-
end
|
299
|
-
add_message "contrast.api.settings.Accumulator" do
|
300
|
-
optional :name, :string, 1
|
301
|
-
optional :limit, :int32, 2
|
302
|
-
optional :count, :int32, 3
|
303
|
-
optional :window_ms, :int64, 4
|
304
|
-
optional :created_ms, :int64, 5
|
305
|
-
optional :last_update_ms, :int64, 6
|
306
|
-
end
|
307
|
-
add_message "contrast.api.settings.Auth" do
|
308
|
-
optional :mode, :enum, 1, "contrast.api.settings.Auth.Mode"
|
309
|
-
end
|
310
|
-
add_enum "contrast.api.settings.Auth.Mode" do
|
311
|
-
value :OFF, 0
|
312
|
-
value :MONITOR, 1
|
313
|
-
end
|
314
|
-
add_message "contrast.api.settings.InputAnalysis" do
|
315
|
-
repeated :results, :message, 1, "contrast.api.settings.InputAnalysisResult"
|
316
|
-
end
|
317
|
-
add_message "contrast.api.settings.InputAnalysisResult" do
|
318
|
-
optional :rule_id, :string, 1
|
319
|
-
optional :input_type, :enum, 3, "contrast.api.settings.InputAnalysisResult.InputType"
|
320
|
-
optional :path, :string, 4
|
321
|
-
optional :key, :string, 5
|
322
|
-
optional :value, :string, 6
|
323
|
-
optional :score_level, :enum, 9, "contrast.api.settings.InputAnalysisResult.ScoreLevel"
|
324
|
-
repeated :ids, :string, 7
|
325
|
-
optional :attack_count, :int32, 8
|
326
|
-
end
|
327
|
-
add_enum "contrast.api.settings.InputAnalysisResult.InputType" do
|
328
|
-
value :UNDEFINED_TYPE, 0
|
329
|
-
value :BODY, 1
|
330
|
-
value :COOKIE_NAME, 2
|
331
|
-
value :COOKIE_VALUE, 3
|
332
|
-
value :HEADER, 4
|
333
|
-
value :PARAMETER_NAME, 5
|
334
|
-
value :PARAMETER_VALUE, 6
|
335
|
-
value :QUERYSTRING, 7
|
336
|
-
value :URI, 8
|
337
|
-
value :SOCKET, 9
|
338
|
-
value :JSON_VALUE, 10
|
339
|
-
value :JSON_ARRAYED_VALUE, 11
|
340
|
-
value :MULTIPART_CONTENT_TYPE, 16
|
341
|
-
value :MULTIPART_VALUE, 17
|
342
|
-
value :MULTIPART_FIELD_NAME, 18
|
343
|
-
value :MULTIPART_NAME, 19
|
344
|
-
value :XML_VALUE, 20
|
345
|
-
value :DWR_VALUE, 21
|
346
|
-
value :METHOD, 22
|
347
|
-
value :REQUEST, 23
|
348
|
-
value :UNKNOWN, 99
|
349
|
-
end
|
350
|
-
add_enum "contrast.api.settings.InputAnalysisResult.ScoreLevel" do
|
351
|
-
value :DONTCARE, 0
|
352
|
-
value :WORTHWATCHING, 1
|
353
|
-
value :DEFINITEATTACK, 2
|
354
|
-
end
|
355
|
-
add_enum "contrast.api.settings.LogLevel" do
|
356
|
-
value :TRACE, 0
|
357
|
-
value :DEBUG, 1
|
358
|
-
value :INFO, 2
|
359
|
-
value :WARN, 3
|
360
|
-
value :ERROR, 4
|
361
|
-
end
|
362
|
-
end
|
363
|
-
|
364
|
-
module Contrast
|
365
|
-
module Api
|
366
|
-
module Settings
|
367
|
-
ApplicationState = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.ApplicationState").msgclass
|
368
|
-
AgentSettings = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.AgentSettings").msgclass
|
369
|
-
ProtectState = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.ProtectState").msgclass
|
370
|
-
ServerFeatures = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.ServerFeatures").msgclass
|
371
|
-
ServerFeatures::InstrumentationMode = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.ServerFeatures.InstrumentationMode").enummodule
|
372
|
-
ContrastServiceData = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.ContrastServiceData").msgclass
|
373
|
-
ApplicationSettings = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.ApplicationSettings").msgclass
|
374
|
-
SqlInjectionSettings = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.SqlInjectionSettings").msgclass
|
375
|
-
Reaction = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.Reaction").msgclass
|
376
|
-
Reaction::Operation = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.Reaction.Operation").enummodule
|
377
|
-
AccumulatorSettings = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.AccumulatorSettings").msgclass
|
378
|
-
InventoryFeatures = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.InventoryFeatures").msgclass
|
379
|
-
AssessFeatures = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.AssessFeatures").msgclass
|
380
|
-
AssessFeatures::SaveStacktrace = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.AssessFeatures.SaveStacktrace").enummodule
|
381
|
-
CustomRuleFeature = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.CustomRuleFeature").msgclass
|
382
|
-
Sampling = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.Sampling").msgclass
|
383
|
-
DynamicSource = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.DynamicSource").msgclass
|
384
|
-
DefendFeatures = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.DefendFeatures").msgclass
|
385
|
-
Syslog = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.Syslog").msgclass
|
386
|
-
Syslog::ConnectionType = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.Syslog.ConnectionType").enummodule
|
387
|
-
Syslog::Severity = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.Syslog.Severity").enummodule
|
388
|
-
BotBlocker = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.BotBlocker").msgclass
|
389
|
-
IpFilter = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.IpFilter").msgclass
|
390
|
-
LogEnhancer = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.LogEnhancer").msgclass
|
391
|
-
LogEnhancer::LogLevel = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.LogEnhancer.LogLevel").enummodule
|
392
|
-
LogEnhancer::LogType = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.LogEnhancer.LogType").enummodule
|
393
|
-
RuleDefinition = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.RuleDefinition").msgclass
|
394
|
-
StringDefinition = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.StringDefinition").msgclass
|
395
|
-
StringDefinition::Type = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.StringDefinition.Type").enummodule
|
396
|
-
Exclusion = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.Exclusion").msgclass
|
397
|
-
Exclusion::ExclusionType = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.Exclusion.ExclusionType").enummodule
|
398
|
-
Exclusion::InputType = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.Exclusion.InputType").enummodule
|
399
|
-
Exclusion::MatchStrategy = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.Exclusion.MatchStrategy").enummodule
|
400
|
-
VirtualPatch = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.VirtualPatch").msgclass
|
401
|
-
VirtualPatchCondition = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.VirtualPatchCondition").msgclass
|
402
|
-
VirtualPatchCondition::InputType = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.VirtualPatchCondition.InputType").enummodule
|
403
|
-
VirtualPatchCondition::Evaluation = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.VirtualPatchCondition.Evaluation").enummodule
|
404
|
-
ProtectionRule = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.ProtectionRule").msgclass
|
405
|
-
ProtectionRule::Mode = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.ProtectionRule.Mode").enummodule
|
406
|
-
Accumulator = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.Accumulator").msgclass
|
407
|
-
Auth = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.Auth").msgclass
|
408
|
-
Auth::Mode = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.Auth.Mode").enummodule
|
409
|
-
InputAnalysis = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.InputAnalysis").msgclass
|
410
|
-
InputAnalysisResult = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.InputAnalysisResult").msgclass
|
411
|
-
InputAnalysisResult::InputType = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.InputAnalysisResult.InputType").enummodule
|
412
|
-
InputAnalysisResult::ScoreLevel = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.InputAnalysisResult.ScoreLevel").enummodule
|
413
|
-
LogLevel = Google::Protobuf::DescriptorPool.generated_pool.lookup("contrast.api.settings.LogLevel").enummodule
|
414
|
-
end
|
415
|
-
end
|
416
|
-
end
|
data/lib/contrast/api/socket.rb
DELETED
@@ -1,43 +0,0 @@
|
|
1
|
-
# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
-
# frozen_string_literal: true
|
3
|
-
|
4
|
-
module Contrast
|
5
|
-
module Api
|
6
|
-
# Behavior common to all sockets used
|
7
|
-
# to communicate with the Contrast Service.
|
8
|
-
module Socket
|
9
|
-
SOCKET_MONITOR = Monitor.new
|
10
|
-
|
11
|
-
# Send a message across the socket and read back the response.
|
12
|
-
# @param marshaled [String] some marshaled form of data to be sent across
|
13
|
-
# the socket. Typically an encoded form of Contrast::Api::Dtm::Message.
|
14
|
-
# @return [String] some marshalled form of data returned by the socket.
|
15
|
-
# Typically an encoded form of Contrast::Api::Settings::AgentSettings.
|
16
|
-
def send_marshaled marshaled
|
17
|
-
SOCKET_MONITOR.synchronize do
|
18
|
-
socket = new_socket
|
19
|
-
|
20
|
-
# write message length
|
21
|
-
len = marshaled.length
|
22
|
-
socket.write([len].pack(Contrast::Api::ENCODING_STRING))
|
23
|
-
|
24
|
-
# write the entire message
|
25
|
-
socket.write(marshaled)
|
26
|
-
socket.close_write
|
27
|
-
|
28
|
-
# read the response length
|
29
|
-
len = socket.read(4).unpack1(Contrast::Api::ENCODING_STRING)
|
30
|
-
|
31
|
-
# read expected response to end
|
32
|
-
socket.read(len)
|
33
|
-
end
|
34
|
-
end
|
35
|
-
|
36
|
-
# Override this method to return a socket.
|
37
|
-
# Should be interface compatible with TCPSocket, UNIXSocket, etc.
|
38
|
-
def new_socket
|
39
|
-
raise NotImplementedError, 'This is abstract, override it.'
|
40
|
-
end
|
41
|
-
end
|
42
|
-
end
|
43
|
-
end
|
@@ -1,206 +0,0 @@
|
|
1
|
-
# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
-
# frozen_string_literal: true
|
3
|
-
|
4
|
-
cs__scoped_require 'contrast/utils/object_share'
|
5
|
-
cs__scoped_require 'contrast/utils/os'
|
6
|
-
cs__scoped_require 'contrast/components/interface'
|
7
|
-
|
8
|
-
module Contrast
|
9
|
-
module Api
|
10
|
-
# This class acts as the interface for the communication between the Agent
|
11
|
-
# and the Service (SpeedRacer) as well as functions as a way for the Agent
|
12
|
-
# to manage the bundled Service.
|
13
|
-
class Speedracer
|
14
|
-
include Contrast::Components::Interface
|
15
|
-
access_component :logging, :contrast_service, :app_context
|
16
|
-
|
17
|
-
attr_reader :client_number,
|
18
|
-
:host,
|
19
|
-
:port,
|
20
|
-
:socket,
|
21
|
-
:connection,
|
22
|
-
:messages_total
|
23
|
-
|
24
|
-
@instance_count = 0
|
25
|
-
@instance_mutex = Mutex.new
|
26
|
-
|
27
|
-
def self.next_client_number
|
28
|
-
@instance_mutex.synchronize do
|
29
|
-
begin
|
30
|
-
@instance_count += 1
|
31
|
-
# Rollover things
|
32
|
-
rescue StandardError
|
33
|
-
@instance_count = 1
|
34
|
-
end
|
35
|
-
end
|
36
|
-
end
|
37
|
-
|
38
|
-
def self.read_only_instance_count
|
39
|
-
@instance_count.dup
|
40
|
-
end
|
41
|
-
|
42
|
-
def initialize connection
|
43
|
-
@client_number = Contrast::Api::Speedracer.next_client_number
|
44
|
-
@messages_total = 0
|
45
|
-
|
46
|
-
@pid = Process.pid.to_i
|
47
|
-
@ppid = Process.ppid.to_i
|
48
|
-
@connection = connection
|
49
|
-
end
|
50
|
-
|
51
|
-
# Allow for the start of a Service, but block so that we only attempt to
|
52
|
-
# start the service one try at a time in the case multiple threads are
|
53
|
-
# trying to send messages.
|
54
|
-
def start_service
|
55
|
-
zombie_check
|
56
|
-
service_starter_thread.join(5)
|
57
|
-
is_service_started = Contrast::Utils::OS.running?
|
58
|
-
logger.error(nil, 'The bundled service could not be started. The agent will not function properly.') unless is_service_started
|
59
|
-
is_service_started
|
60
|
-
end
|
61
|
-
|
62
|
-
def send_one msg
|
63
|
-
case msg
|
64
|
-
when Contrast::Api::Dtm::ServerActivity
|
65
|
-
send_server_activity(msg)
|
66
|
-
when Contrast::Api::Dtm::AgentStartup
|
67
|
-
send_agent_startup(msg)
|
68
|
-
when Contrast::Api::Dtm::ApplicationCreate
|
69
|
-
send_application_create(msg)
|
70
|
-
when Contrast::Api::Dtm::ApplicationUpdate
|
71
|
-
send_application_update(msg)
|
72
|
-
when Contrast::Api::Dtm::Activity
|
73
|
-
send_application_activity(msg)
|
74
|
-
when Contrast::Api::Dtm::HttpRequest
|
75
|
-
send_prefilter(msg)
|
76
|
-
when Contrast::Api::Dtm::HttpResponse
|
77
|
-
send_postfilter(msg)
|
78
|
-
when Contrast::Api::Dtm::Noop
|
79
|
-
send_noop(msg)
|
80
|
-
when Contrast::Api::Dtm::ObservedRoute
|
81
|
-
send_observed_route(msg)
|
82
|
-
end
|
83
|
-
end
|
84
|
-
|
85
|
-
private
|
86
|
-
|
87
|
-
# check if there's a zombie service that exists, and wait on it if so.
|
88
|
-
# currently, this only happens when trying to initialize speedracer
|
89
|
-
def zombie_check
|
90
|
-
return if windows?
|
91
|
-
|
92
|
-
zombie_pid_list = Contrast::Utils::OS.zombie_pids
|
93
|
-
zombie_pid_list.each do |pid|
|
94
|
-
Process.wait(pid.to_i)
|
95
|
-
end
|
96
|
-
end
|
97
|
-
|
98
|
-
def windows?
|
99
|
-
@_windows = Contrast::Utils::OS.windows? if @_windows.nil?
|
100
|
-
@_windows
|
101
|
-
end
|
102
|
-
|
103
|
-
def determine_startup_options
|
104
|
-
return { out: :out, err: :err } if Contrast::Agent::FeatureState.instance.service_control[:logger_path] == 'STDOUT'
|
105
|
-
|
106
|
-
{ out: File::NULL, err: File::NULL }
|
107
|
-
end
|
108
|
-
|
109
|
-
# This is a separate method so we can overwrite it globally in specs
|
110
|
-
def spawn_service
|
111
|
-
options = determine_startup_options
|
112
|
-
spawn 'contrast_service', options
|
113
|
-
end
|
114
|
-
|
115
|
-
def service_starter_thread
|
116
|
-
Contrast::Agent::Thread.new do
|
117
|
-
# Always check to see if it already started
|
118
|
-
unless Contrast::Utils::OS.running?
|
119
|
-
# Spawn the service process
|
120
|
-
spawn_service
|
121
|
-
# Block until service is running
|
122
|
-
sleep(0.1) until Contrast::Utils::OS.running?
|
123
|
-
end
|
124
|
-
end
|
125
|
-
end
|
126
|
-
|
127
|
-
def send_server_activity server_activity
|
128
|
-
msg = base_message
|
129
|
-
msg.server_activity = server_activity
|
130
|
-
send_message(msg)
|
131
|
-
end
|
132
|
-
|
133
|
-
def send_agent_startup agent_startup
|
134
|
-
msg = base_message
|
135
|
-
msg.agent_startup = agent_startup
|
136
|
-
send_message(msg)
|
137
|
-
end
|
138
|
-
|
139
|
-
def send_application_create app_create
|
140
|
-
msg = base_message
|
141
|
-
msg.application_create = app_create
|
142
|
-
send_message(msg)
|
143
|
-
end
|
144
|
-
|
145
|
-
def send_application_update app_update
|
146
|
-
msg = base_message
|
147
|
-
msg.application_update = app_update
|
148
|
-
send_message(msg)
|
149
|
-
end
|
150
|
-
|
151
|
-
def send_application_activity activity
|
152
|
-
msg = base_message
|
153
|
-
msg.activity = activity
|
154
|
-
send_message(msg)
|
155
|
-
end
|
156
|
-
|
157
|
-
def send_prefilter http_request
|
158
|
-
msg = base_message
|
159
|
-
msg.prefilter = http_request
|
160
|
-
send_message(msg)
|
161
|
-
end
|
162
|
-
|
163
|
-
def send_postfilter http_response
|
164
|
-
msg = base_message
|
165
|
-
msg.postfilter = http_response
|
166
|
-
send_message(msg)
|
167
|
-
end
|
168
|
-
|
169
|
-
def send_noop noop = nil
|
170
|
-
msg = base_message
|
171
|
-
msg.noop = noop || Contrast::Api::Dtm::Noop.new
|
172
|
-
send_message(msg)
|
173
|
-
end
|
174
|
-
|
175
|
-
def send_observed_route observed_route
|
176
|
-
msg = base_message
|
177
|
-
msg.observed_route = observed_route
|
178
|
-
send_message(msg)
|
179
|
-
end
|
180
|
-
|
181
|
-
def base_message
|
182
|
-
msg = Contrast::Api::Dtm::Message.new
|
183
|
-
msg.app_name = APP_CONTEXT.name
|
184
|
-
msg.app_path = APP_CONTEXT.path
|
185
|
-
msg.app_language = Contrast::Utils::ObjectShare::RUBY
|
186
|
-
msg.client_id = APP_CONTEXT.client_id
|
187
|
-
msg.client_number = client_number
|
188
|
-
msg.client_total = Contrast::Api::Speedracer.read_only_instance_count
|
189
|
-
msg.message_count = (@messages_total += 1)
|
190
|
-
msg.pid = APP_CONTEXT.pid
|
191
|
-
msg.ppid = APP_CONTEXT.ppid
|
192
|
-
msg
|
193
|
-
end
|
194
|
-
|
195
|
-
def send_message message
|
196
|
-
to_service = Contrast::Api::Dtm::Message.encode(message)
|
197
|
-
from_service = send_marshaled(to_service)
|
198
|
-
Contrast::Api::Settings::AgentSettings.decode(from_service)
|
199
|
-
end
|
200
|
-
|
201
|
-
def send_marshaled marshaled
|
202
|
-
connection.send_marshaled(marshaled)
|
203
|
-
end
|
204
|
-
end
|
205
|
-
end
|
206
|
-
end
|