contrast-agent 4.13.0 → 5.0.0

data/lib/contrast/utils/exclude_key.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 module Contrast

data/lib/contrast/utils/findings.rb

@@ -0,0 +1,65 @@
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# frozen_string_literal: true
+
+require 'contrast/components/logger'
+
+module Contrast
+  module Utils
+    # Utility for saving raw findings for later
+    class Findings
+      include Contrast::Components::Logger::InstanceMethods
+
+      def initialize
+        @_collection = []
+      end
+
+      def collection
+        @_collection ||= []
+      end
+
+      def push trigger_node, source, object, ret, *args
+        return Contrast::Utils::ObjectShare::EMPTY_ARRAY unless trigger_node.collectable?
+
+        @_collection << { trigger_node: trigger_node, source: source, object: object, ret: ret, args: args }
+      end
+
+      # Some rules requires response to be available before validating them correctly,
+      # so we check if trigger_node.rule_id is collectable and then save them for
+      # later report, when we have the response.
+      #
+      # @param trigger_node [Contrast::Agent::Assess::Policy::TriggerNode] the node to direct applying this
+      # trigger event
+      # @param source [Object] the source of the Trigger Event
+      # @param object [Object] the Object on which the method was invoked
+      # @param ret [Object] the Return of the invoked method
+      # @param args [Array<Object>] the Arguments with which the method was invoked
+      def collect_finding trigger_node, source, object, ret, *args
+        push trigger_node, source, object, ret, args
+        logger.trace('Finding collected', node_id: trigger_node.id,
+                                          source_id: source.__id__,
+                                          rule: trigger_node.rule_id)
+      end
+
+      # Build and report all collected findings for the collectable rules.
+      #
+      # We make sure the content-type is present before reporting, because some
+      # findings do require it for validation.
+      #
+      # @return [true, nil]
+      def report_collected_findings
+        return if @_collection.empty?
+        return if Contrast::Agent::REQUEST_TRACKER.current&.response&.content_type.nil?
+
+        while @_collection.any?
+          finding = @_collection.pop
+          Contrast::Agent::Assess::Policy::TriggerMethod.build_finding finding[:trigger_node],
+                                                                       finding[:source],
+                                                                       finding[:object],
+                                                                       finding[:ret],
+                                                                       finding[:args]
+        end
+        true
+      end
+    end
+  end
+end

data/lib/contrast/utils/hash_digest.rb

@@ -1,7 +1,8 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'digest'
+require 'contrast/utils/hash_digest_extend'
 
 module Contrast
   module Utils
@@ -13,6 +14,7 @@ module Contrast
     # https://bitbucket.org/contrastsecurity/assess-specifications/src/master/vulnerability/preflight.md
     class HashDigest < Digest::Class
       include Digest::Instance
+      extend Contrast::Utils::HashDigestExtend
 
       CONTENT_LENGTH_HEADER = 'Content-Length'
       CRYPTO_RULES = %w[crypto-bad-ciphers crypto-bad-mac].cs__freeze
@@ -21,94 +23,48 @@ module Contrast
       CLASS_SOURCE_KEY = 'source'
       CLASS_CONSTANT_NAME_KEY = 'name'
       CLASS_LINE_NO_KEY = 'lineNo'
-      class << self
-        def generate_request_hash request
-          hash = new
-          hash.update(request.request_method)
-          hash.update(request.normalized_uri)
-          request.parameters.each_key do |name|
-            hash.update(name)
-          end
-          cl = request.headers[CONTENT_LENGTH_HEADER]
-          hash.update_on_content_length(cl) if cl
-          hash.finish
-        end
-
-        def generate_event_hash finding, source, request
-          return generate_dataflow_hash(finding, request) if finding.events.length.to_i > 1
-
-          id = finding.rule_id
-          return generate_crypto_hash(finding, source, request) if CRYPTO_RULES.include?(id)
-
-          generate_trigger_hash(finding, request)
-        end
-
-        def generate_config_hash finding
-          hash = new
-          hash.update(finding.rule_id)
-          path = finding.properties[CONFIG_PATH_KEY]
-          hash.update(path)
-          method = finding.properties[CONFIG_SESSION_ID_KEY]
-          hash.update(method)
-          hash.finish
-        end
-
-        def generate_class_scanning_hash finding
-          hash = new
-          hash.update(finding.rule_id)
-          module_name = finding.properties[CLASS_SOURCE_KEY]
-          hash.update(module_name)
-          # We're not currently collecting this. 30/7/19 HM
-          line_no = finding.properties[CLASS_LINE_NO_KEY]
-          hash.update(line_no)
-          field = finding.properties[CLASS_CONSTANT_NAME_KEY]
-          hash.update(field)
-          hash.finish
-        end
-
-        private
-
-        def generate_crypto_hash finding, algorithm, request
-          hash = new
-          hash.update(finding.rule_id)
-          hash.update(algorithm)
-          hash.update_on_request(finding, request)
-          hash.finish
-        end
-
-        def generate_dataflow_hash finding, request
-          hash = new
-          hash.update(finding.rule_id)
-          hash.update_on_sources(finding.events)
-          hash.update_on_request(finding, request)
-          hash.finish
-        end
-
-        def generate_trigger_hash finding, request
-          hash = new
-          hash.update(finding.rule_id)
-          hash.update_on_request(finding, request)
-          hash.finish
-        end
-      end
 
+      # Update to CRC checksum the finding route and verb if finding route
+      # [Contrast::Api::Dtm::RouteCoverage] is available else update the passed
+      # request or Contrast::REQUEST_TRACKER.current.request uri and used request
+      # method.
+      #
+      # @param finding [Contrast::Api::Dtm::Finding] finding to be reported
+      # @param request [Contrast::Agent::Request] our wrapper around the Rack::Request.
+      # @return checksum [Integer, nil] returns nil if there is no request context or tracking
+      # is disabled.
       def update_on_request finding, request
+        context = Contrast::Agent::REQUEST_TRACKER.current
+        return unless context || ::Contrast::ASSESS.non_request_tracking?
+
         if (route = finding.routes[0])
-          update(route.route)
-          update(route.verb)
-        elsif request ||= Contrast::Agent::REQUEST_TRACKER.current&.request
-          update(request.normalized_uri)
-          update(request.request_method)
+          update(route.route) # the normalized URL used to access the method in the route.
+          update(route.verb) # the HTTP Verb used  to access the method in the route.
+        elsif request ||= context&.request
+          update(request.normalized_uri) # the normalized URL used to access the method in the route.
+          update(request.request_method) # The HTTP method used in the request
         end
       end
 
+      # Update to CRC checksum the event source name and source type.
+      # Expects Contrast::Api::Dtm::TraceEvent || Contrast::Agent::Assess::Events::SourceEvent
+      #
+      # @param events [Protobuf::Field::FieldArray<Contrast::Api::Dtm::TraceEvent>,
+      #                                            <Contrast::Agent::Assess::Events::SourceEvent>]
+      #                                            Array of TraceEvents
+      # @return checksum [Integer, nil] returns nil if there is no events
       def update_on_sources events
         return unless events&.any?
 
         events.each do |event|
-          event.event_sources.each do |source|
-            update(source.type)
-            update(source.name) # rubocop:disable Security/Module/Name -- API attribute.
+          if event.cs__is_a?(Contrast::Api::Dtm::TraceEvent)
+            event.event_sources&.each do |source|
+              update(source.type)
+              update(source.name) # rubocop:disable Security/Module/Name
+            end
+          elsif event.cs__is_a?(Contrast::Agent::Assess::Events::SourceEvent)
+            update(event.source_type)
+            update(event.source_name)
           end
         end
       end
@@ -127,12 +83,23 @@ module Contrast
         @crc32 = 0
       end
 
+      # Converts  given string to CRC checksum. CRC32 checksum ensures that If error
+      # of a single bit occurs, the CRC checksum will fail, regardless of any other
+      # property of the transmitted data, including its length. Called several times
+      # with previous CRC to recalculate the new output.
+      #
+      # @param str [String]
+      # @return @crc32 [Integer, nil] updated value of crc 32 bit integer checksum or
+      # nil if passed string is nil or empty
       def update str
         return unless str
 
         @crc32 = Zlib.crc32(str, @crc32)
       end
 
+      # Casts current CRC checksum to String
+      #
+      # @return @crc32 [String] String representation of CRC32 checksum
       def finish
         @crc32.to_s
       end

data/lib/contrast/utils/hash_digest_extend.rb

@@ -0,0 +1,129 @@
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# frozen_string_literal: true
+
+require 'digest'
+require 'contrast/utils/hash_digest'
+
+module Contrast
+  module Utils
+    # We use this class to provide hashes for our Request and Finding objects
+    # based upon our definitions of uniqueness.
+    # While the uniqueness of the request object is something internal to the
+    # Ruby agent, the uniqueness of the Finding hash is defined by a
+    # specification shared across all agent teams. The spec can be found here:
+    # https://bitbucket.org/contrastsecurity/assess-specifications/src/master/vulnerability/preflight.md
+    module HashDigestExtend
+      # Generates the hash checksum for the request. Converts the request method, uri,
+      # param names and content length to CRC checksum and returns string representation
+      #
+      # @param request [Contrast::Agent::Request] our wrapper around the Rack::Request.
+      # @return checksum [String] String representation of CRC32 checksum
+      def generate_request_hash request
+        hash = new
+        hash.update(request.request_method)
+        hash.update(request.normalized_uri)
+        request.parameters.each_key do |name|
+          hash.update(name)
+        end
+        cl = request.headers[Contrast::Utils::HashDigest::CONTENT_LENGTH_HEADER]
+        hash.update_on_content_length(cl) if cl
+        hash.finish
+      end
+
+      # Generates the hash checksum for the event, either dataflow,
+      # crypto(crypto-bad-ciphers, crypto-bad-mac) rules or trigger event
+      # and returns string representation.
+      #
+      # @param finding [Contrast::Api::Dtm::Finding] to be reported
+      # @param source [Object] the source of the Trigger Event
+      # @param request [Contrast::Agent::Request] our wrapper around the Rack::Request.
+      # @return checksum [String] String representation of CRC32 checksum
+      def generate_event_hash finding, source, request
+        return generate_dataflow_hash(finding, request) if finding.events.length.to_i > 1
+
+        id = finding.rule_id
+        return generate_crypto_hash(finding, source, request) if Contrast::Utils::HashDigest::CRYPTO_RULES.include?(id)
+
+        generate_trigger_hash(finding, request)
+      end
+
+      # Generates the hash checksum for configurations. Converts the finding rule_id, session_id and configPath and
+      # to CRC32 checksum and returns string representation to be appended to Contrast::Api::Dtm::Finding
+      #
+      # @param finding [Contrast::Api::Dtm::Finding] to be reported
+      # @return checksum [String] String representation of CRC32 checksum.
+      def generate_config_hash finding
+        hash = new
+        hash.update(finding.rule_id)
+        path = finding.properties[Contrast::Utils::HashDigest::CONFIG_PATH_KEY]
+        hash.update(path)
+        method = finding.properties[Contrast::Utils::HashDigest::CONFIG_SESSION_ID_KEY]
+        hash.update(method)
+        hash.finish
+      end
+
+      # Generates the hash checksum for class scanning. Converts the rule_id, finding.properties(source, name)
+      # to CRC32 checksum and returns string representation.
+      #
+      # @param finding [Contrast::Api::Dtm::Finding] to be reported
+      # @return checksum [String] String representation of CRC32 checksum.
+      def generate_class_scanning_hash finding
+        hash = new
+        hash.update(finding.rule_id)
+        module_name = finding.properties[Contrast::Utils::HashDigest::CLASS_SOURCE_KEY]
+        hash.update(module_name)
+        # We're not currently collecting this. 30/7/19 HM
+        line_no = finding.properties[Contrast::Utils::HashDigest::CLASS_LINE_NO_KEY]
+        hash.update(line_no)
+        field = finding.properties[Contrast::Utils::HashDigest::CLASS_CONSTANT_NAME_KEY]
+        hash.update(field)
+        hash.finish
+      end
+
+      private
+
+      # Generates the hash checksum for crypto(crypto-bad-ciphers, crypto-bad-mac) rules.
+      # used in #generate_event_hash.
+      #
+      #
+      # @param finding [Contrast::Api::Dtm::Finding] to be reported
+      # @param algorithm [Object] the source of the Trigger Event
+      # @param request [Contrast::Agent::Request] our wrapper around the Rack::Request.
+      # @return checksum [String] String representation of CRC32 checksum
+      def generate_crypto_hash finding, algorithm, request
+        hash = new
+        hash.update(finding.rule_id)
+        hash.update(algorithm)
+        hash.update_on_request(finding, request)
+        hash.finish
+      end
+
+      # Generates the hash checksum for dataflow when the finding events are more than one
+      # used in #generate_event_hash.
+      #
+      # @param finding [Contrast::Api::Dtm::Finding] to be reported
+      # @param request [Contrast::Agent::Request] our wrapper around the Rack::Request.
+      # @return checksum [String] String representation of CRC32 checksum
+      def generate_dataflow_hash finding, request
+        hash = new
+        hash.update(finding.rule_id)
+        hash.update_on_sources(finding.events)
+        hash.update_on_request(finding, request)
+        hash.finish
+      end
+
+      # Generates the hash checksum for trigger
+      # used in #generate_event_hash.
+      #
+      # @param finding [Contrast::Api::Dtm::Finding] to be reported
+      # @param request [Contrast::Agent::Request] our wrapper around the Rack::Request.
+      # @return checksum [String] String representation of CRC32 checksum
+      def generate_trigger_hash finding, request
+        hash = new
+        hash.update(finding.rule_id)
+        hash.update_on_request(finding, request)
+        hash.finish
+      end
+    end
+  end
+end

data/lib/contrast/utils/head_dump_utils_extend.rb

@@ -0,0 +1,74 @@
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# frozen_string_literal: true
+
+module Contrast
+  module Utils
+    # this module extends HeadDumpUtil
+    module HeadDumpExtend
+      def log_enabled_warning
+        control = Contrast::Utils::HeapDumpUtil.control
+        dir    = control[:path]
+        window = control[:window]
+        count  = control[:count]
+        delay  = control[:delay]
+        clean  = control[:clean]
+
+        logger.info <<~WARNING
+          *****************************************************
+          ********      HEAP DUMP HAS BEEN ENABLED     ********
+          *** APPLICATION PROCESS WILL EXIT UPON COMPLETION ***
+          *****************************************************
+
+          Heap dump is a debugging tool that snapshots the entire
+          state of the Ruby VM. It is an exceptionally expensive
+          process, and should only be used to debug especially
+          pernicious errors.
+
+          It will write multiple memory snaphots, which are liable
+          to be multiple gigabytes in size.
+          They will be named "[unix timestamp]-heap.dump",
+          e.g.: 1020304050-heap.dump
+
+          It will then call Ruby `exit()`.
+
+          If this is not your specific intent, you can (and should)
+          disable this option in your Contrast config file.
+
+          HEAP DUMP PARAMETERS:
+          \t[write files to this directory]             dir:     #{ dir    }
+          \t[wait this many seconds in between dumps]   window:  #{ window }
+          \t[heap dump this many times]                 count:   #{ count  }
+          \t[wait this many seconds into app lifetime]  delay:   #{ delay  }
+          \t[perform gc pass before dump]               clean:   #{ clean  }
+
+          *****************************************************
+          ********        YOU HAVE BEEN WARNED         ********
+          *****************************************************
+        WARNING
+      end
+
+      def capture_heap_dump
+        control = Contrast::Utils::HeapDumpUtil.control
+        dir    = control[:path]
+        window = control[:window]
+        count  = control[:count]
+        clean  = control[:clean]
+        logger.info('HEAP DUMP MAIN LOOP')
+        ObjectSpace.trace_object_allocations_start
+        count.times do |i|
+          logger.info('STARTING HEAP DUMP PASS', current_pass: i, max: count)
+          snapshot_heap(dir, clean)
+          logger.info('FINISHING HEAP DUMP PASS', current_pass: i, max: count)
+          sleep(window)
+        end
+      ensure
+        ObjectSpace.trace_object_allocations_stop
+        logger.info('*****************************************************')
+        logger.info('********        HEAP DUMP HAS CONCLUDED      ********')
+        logger.info('***     APPLICATION PROCESS WILL EXIT SHORTLY     ***')
+        logger.info('*****************************************************')
+        exit # rubocop:disable Rails/Exit We weren't kidding!
+      end
+    end
+  end
+end

data/lib/contrast/utils/heap_dump_util.rb

@@ -1,10 +1,11 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'objspace'
 require 'singleton'
 require 'contrast/components/heap_dump'
 require 'contrast/components/logger'
+require 'contrast/utils/head_dump_utils_extend'
 
 module Contrast
   module Utils
@@ -13,6 +14,7 @@ module Contrast
       extend Contrast::Components::Logger::InstanceMethods
       include Contrast::Components::Logger::InstanceMethods
       extend Contrast::Components::HeapDump::InstanceMethods
+      include Contrast::Utils::HeadDumpExtend
 
       LOG_ERROR_DUMPS = 'Unable to generate heap dumps'
       FILE_WRITE_FLAGS = 'w'
@@ -47,71 +49,6 @@ module Contrast
         nil
       end
 
-      def log_enabled_warning
-        control = Contrast::Utils::HeapDumpUtil.control
-        dir    = control[:path]
-        window = control[:window]
-        count  = control[:count]
-        delay  = control[:delay]
-        clean  = control[:clean]
-
-        logger.info <<~WARNING
-          *****************************************************
-          ********      HEAP DUMP HAS BEEN ENABLED     ********
-          *** APPLICATION PROCESS WILL EXIT UPON COMPLETION ***
-          *****************************************************
-
-          Heap dump is a debugging tool that snapshots the entire
-          state of the Ruby VM. It is an exceptionally expensive
-          process, and should only be used to debug especially
-          pernicious errors.
-
-          It will write multiple memory snaphots, which are liable
-          to be multiple gigabytes in size.
-          They will be named "[unix timestamp]-heap.dump",
-          e.g.: 1020304050-heap.dump
-
-          It will then call Ruby `exit()`.
-
-          If this is not your specific intent, you can (and should)
-          disable this option in your Contrast config file.
-
-          HEAP DUMP PARAMETERS:
-          \t[write files to this directory]             dir:     #{ dir    }
-          \t[wait this many seconds in between dumps]   window:  #{ window }
-          \t[heap dump this many times]                 count:   #{ count  }
-          \t[wait this many seconds into app lifetime]  delay:   #{ delay  }
-          \t[perform gc pass before dump]               clean:   #{ clean  }
-
-          *****************************************************
-          ********        YOU HAVE BEEN WARNED         ********
-          *****************************************************
-        WARNING
-      end
-
-      def capture_heap_dump
-        control = Contrast::Utils::HeapDumpUtil.control
-        dir    = control[:path]
-        window = control[:window]
-        count  = control[:count]
-        clean  = control[:clean]
-        logger.info('HEAP DUMP MAIN LOOP')
-        ObjectSpace.trace_object_allocations_start
-        count.times do |i|
-          logger.info('STARTING HEAP DUMP PASS', current_pass: i, max: count)
-          snapshot_heap(dir, clean)
-          logger.info('FINISHING HEAP DUMP PASS', current_pass: i, max: count)
-          sleep(window)
-        end
-      ensure
-        ObjectSpace.trace_object_allocations_stop
-        logger.info('*****************************************************')
-        logger.info('********        HEAP DUMP HAS CONCLUDED      ********')
-        logger.info('***     APPLICATION PROCESS WILL EXIT SHORTLY     ***')
-        logger.info('*****************************************************')
-        exit # rubocop:disable Rails/Exit We weren't kidding!
-      end
-
       def snapshot_heap dir, clean
         output = "#{ Time.now.to_f }-heap.dump"
         output = File.join(dir, output)

data/lib/contrast/utils/invalid_configuration_util.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'contrast/agent/assess/policy/trigger_method'
@@ -33,12 +33,30 @@ module Contrast
           hash = Contrast::Utils::HashDigest.generate_config_hash(finding)
           finding.hash_code = Contrast::Utils::StringUtils.force_utf8(hash)
           finding.preflight = Contrast::Utils::PreflightUtil.create_preflight(finding)
-          Contrast::Agent::Assess::Policy::TriggerMethod.report_finding(finding)
+          if Contrast::Agent::Reporter.enabled? # TODO: RUBY-1438 -- remove
+            cs__report_new_finding(hash, rule_id, user_provided_options, call_location)
+          else
+            Contrast::Agent::Assess::Policy::TriggerMethod.report_finding(finding)
+          end
         end
       rescue StandardError => e
         logger.error('Unable to build a finding', e, rule: rule_id)
       end
 
+      def cs__report_new_finding hash_code, rule_id, user_provided_options, call_location
+        new_preflight = Contrast::Agent::Reporting::Preflight.new
+        new_preflight_message = Contrast::Agent::Reporting::PreflightMessage.new
+        new_preflight_message.hash_code = hash_code
+        new_preflight_message.data = "#{ rule_id },#{ hash_code }"
+        new_preflight.messages << new_preflight_message
+
+        ruby_finding = Contrast::Agent::Reporting::Finding.new rule_id
+        ruby_finding.hash_code = hash_code
+        set_new_finding_properties(ruby_finding, user_provided_options, call_location)
+        Contrast::Agent.reporter&.send_event_immediately(new_preflight)
+        Contrast::Agent::Reporting::ReportingStorage[hash_code] = ruby_finding
+      end
+
       private
 
       # Set the properties needed to report and subsequently render this finding on the finding given.
@@ -76,6 +94,18 @@ module Contrast
         end
         call_location&.label&.dup
       end
+
+      def set_new_finding_properties finding, user_provided_options, call_location
+        path = call_location.path
+        # just get the file name, not the full path
+        path = path.split(Contrast::Utils::ObjectShare::SLASH).last
+        session_id = user_provided_options[:key].to_s if user_provided_options
+        finding.properties[CS__SESSION_ID] = session_id
+        finding.properties[CS__PATH] = path
+        file_path = call_location.absolute_path
+        snippet = file_snippet(file_path, call_location)
+        finding.properties[CS__SNIPPET] = snippet
+      end
     end
   end
 end

data/lib/contrast/utils/io_util.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'contrast/components/logger'
@@ -11,7 +11,7 @@ module Contrast
 
       class << self
         # We're only going to call rewind on things that we believe are safe to
-        # call it on. This method white lists those cases and returns false in
+        # call it on. This method allow lists those cases and returns false in
         # all others.
         def should_rewind? potential_io
           return true if potential_io.is_a?(StringIO)

data/lib/contrast/utils/job_servers_running.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'contrast/components/logger'