contrast-agent 4.14.0 → 5.2.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.simplecov +2 -3
- data/Gemfile +1 -1
- data/LICENSE.txt +1 -1
- data/Rakefile +1 -1
- data/exe/contrast_service +1 -1
- data/ext/build_funchook.rb +1 -1
- data/ext/cs__assess_array/cs__assess_array.c +1 -1
- data/ext/cs__assess_array/extconf.rb +1 -1
- data/ext/cs__assess_basic_object/cs__assess_basic_object.c +1 -1
- data/ext/cs__assess_basic_object/extconf.rb +1 -1
- data/ext/cs__assess_fiber_track/cs__assess_fiber_track.c +1 -1
- data/ext/cs__assess_fiber_track/extconf.rb +1 -1
- data/ext/cs__assess_hash/cs__assess_hash.c +1 -1
- data/ext/cs__assess_hash/extconf.rb +1 -1
- data/ext/cs__assess_kernel/cs__assess_kernel.c +8 -5
- data/ext/cs__assess_kernel/extconf.rb +1 -1
- data/ext/cs__assess_marshal_module/cs__assess_marshal_module.c +1 -1
- data/ext/cs__assess_marshal_module/extconf.rb +1 -1
- data/ext/cs__assess_module/cs__assess_module.c +49 -39
- data/ext/cs__assess_module/extconf.rb +1 -1
- data/ext/cs__assess_regexp/cs__assess_regexp.c +1 -1
- data/ext/cs__assess_regexp/extconf.rb +1 -1
- data/ext/cs__assess_string/cs__assess_string.c +1 -1
- data/ext/cs__assess_string/extconf.rb +1 -1
- data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.c +1 -1
- data/ext/cs__assess_string_interpolation26/extconf.rb +1 -1
- data/ext/cs__assess_yield_track/cs__assess_yield_track.c +1 -1
- data/ext/cs__assess_yield_track/extconf.rb +1 -1
- data/ext/cs__common/cs__common.c +5 -1
- data/ext/cs__common/cs__common.h +1 -0
- data/ext/cs__common/extconf.rb +1 -1
- data/ext/cs__contrast_patch/cs__contrast_patch.c +53 -28
- data/ext/cs__contrast_patch/cs__contrast_patch.h +2 -0
- data/ext/cs__contrast_patch/extconf.rb +1 -1
- data/ext/cs__os_information/cs__os_information.c +1 -1
- data/ext/cs__os_information/extconf.rb +1 -1
- data/ext/cs__scope/cs__scope.c +747 -0
- data/ext/cs__scope/cs__scope.h +88 -0
- data/ext/{cs__assess_active_record_named → cs__scope}/extconf.rb +1 -1
- data/ext/extconf_common.rb +1 -1
- data/lib/contrast/agent/assess/contrast_event.rb +27 -24
- data/lib/contrast/agent/assess/contrast_object.rb +5 -2
- data/lib/contrast/agent/assess/events/event_data.rb +30 -0
- data/lib/contrast/agent/assess/events/event_factory.rb +14 -6
- data/lib/contrast/agent/assess/events/source_event.rb +22 -3
- data/lib/contrast/agent/assess/finalizers/freeze.rb +1 -1
- data/lib/contrast/agent/assess/finalizers/hash.rb +1 -1
- data/lib/contrast/agent/assess/policy/dynamic_source_factory.rb +7 -7
- data/lib/contrast/agent/assess/policy/patcher.rb +1 -35
- data/lib/contrast/agent/assess/policy/policy.rb +1 -1
- data/lib/contrast/agent/assess/policy/policy_node.rb +2 -2
- data/lib/contrast/agent/assess/policy/policy_scanner.rb +1 -1
- data/lib/contrast/agent/assess/policy/preshift.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagation_method.rb +55 -28
- data/lib/contrast/agent/assess/policy/propagation_node.rb +3 -6
- data/lib/contrast/agent/assess/policy/propagator/append.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/base.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/center.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/custom.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/database_write.rb +6 -2
- data/lib/contrast/agent/assess/policy/propagator/insert.rb +5 -2
- data/lib/contrast/agent/assess/policy/propagator/keep.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/match_data.rb +13 -3
- data/lib/contrast/agent/assess/policy/propagator/next.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/prepend.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/rack_protection.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/remove.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/replace.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/reverse.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/select.rb +3 -2
- data/lib/contrast/agent/assess/policy/propagator/splat.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/split.rb +27 -25
- data/lib/contrast/agent/assess/policy/propagator/substitution.rb +3 -5
- data/lib/contrast/agent/assess/policy/propagator/substitution_utils.rb +190 -0
- data/lib/contrast/agent/assess/policy/propagator/trim.rb +9 -4
- data/lib/contrast/agent/assess/policy/propagator.rb +1 -1
- data/lib/contrast/agent/assess/policy/source_method.rb +39 -26
- data/lib/contrast/agent/assess/policy/source_node.rb +1 -1
- data/lib/contrast/agent/assess/policy/source_validation/cross_site_validator.rb +1 -1
- data/lib/contrast/agent/assess/policy/source_validation/source_validation.rb +1 -1
- data/lib/contrast/agent/assess/policy/trigger/reflected_xss.rb +7 -2
- data/lib/contrast/agent/assess/policy/trigger/xpath.rb +1 -1
- data/lib/contrast/agent/assess/policy/trigger_method.rb +41 -25
- data/lib/contrast/agent/assess/policy/trigger_node.rb +1 -1
- data/lib/contrast/agent/assess/policy/trigger_validation/redos_validator.rb +1 -1
- data/lib/contrast/agent/assess/policy/trigger_validation/ssrf_validator.rb +1 -1
- data/lib/contrast/agent/assess/policy/trigger_validation/trigger_validation.rb +1 -1
- data/lib/contrast/agent/assess/policy/trigger_validation/xss_validator.rb +1 -1
- data/lib/contrast/agent/assess/properties.rb +1 -1
- data/lib/contrast/agent/assess/property/evented.rb +25 -12
- data/lib/contrast/agent/assess/property/tagged.rb +1 -1
- data/lib/contrast/agent/assess/property/updated.rb +1 -1
- data/lib/contrast/agent/assess/rule/provider/hardcoded_key.rb +1 -19
- data/lib/contrast/agent/assess/rule/provider/hardcoded_password.rb +1 -13
- data/lib/contrast/agent/assess/rule/provider/hardcoded_value_rule.rb +7 -59
- data/lib/contrast/agent/assess/rule/provider.rb +1 -1
- data/lib/contrast/agent/assess/rule/response/auto_complete_rule.rb +69 -0
- data/lib/contrast/agent/assess/rule/response/base_rule.rb +130 -0
- data/lib/contrast/agent/assess/rule/response/body_rule.rb +109 -0
- data/lib/contrast/agent/assess/rule/response/cache_control_header_rule.rb +157 -0
- data/lib/contrast/agent/assess/rule/response/click_jacking_header_rule.rb +26 -0
- data/lib/contrast/agent/assess/rule/response/csp_header_insecure_rule.rb +100 -0
- data/lib/contrast/agent/assess/rule/response/csp_header_missing_rule.rb +26 -0
- data/lib/contrast/agent/assess/rule/response/framework/rails_support.rb +29 -0
- data/lib/contrast/agent/assess/rule/response/header_rule.rb +70 -0
- data/lib/contrast/agent/assess/rule/response/hsts_header_rule.rb +36 -0
- data/lib/contrast/agent/assess/rule/response/parameters_pollution_rule.rb +61 -0
- data/lib/contrast/agent/assess/rule/response/x_content_type_header_rule.rb +26 -0
- data/lib/contrast/agent/assess/rule/response/x_xss_protection_header_rule.rb +36 -0
- data/lib/contrast/agent/assess/tag.rb +1 -1
- data/lib/contrast/agent/assess/tracker.rb +1 -1
- data/lib/contrast/agent/assess.rb +1 -2
- data/lib/contrast/agent/at_exit_hook.rb +1 -1
- data/lib/contrast/agent/deadzone/policy/deadzone_node.rb +13 -8
- data/lib/contrast/agent/deadzone/policy/policy.rb +1 -1
- data/lib/contrast/agent/disable_reaction.rb +1 -1
- data/lib/contrast/agent/exclusion_matcher.rb +1 -1
- data/lib/contrast/agent/inventory/database_config.rb +115 -77
- data/lib/contrast/agent/inventory/dependencies.rb +1 -1
- data/lib/contrast/agent/inventory/dependency_analysis.rb +1 -1
- data/lib/contrast/agent/inventory/dependency_usage_analysis.rb +3 -3
- data/lib/contrast/agent/inventory/policy/datastores.rb +1 -1
- data/lib/contrast/agent/inventory/policy/policy.rb +1 -1
- data/lib/contrast/agent/inventory/policy/trigger_node.rb +1 -1
- data/lib/contrast/agent/inventory.rb +1 -1
- data/lib/contrast/agent/metric_telemetry_event.rb +1 -1
- data/lib/contrast/agent/middleware.rb +4 -2
- data/lib/contrast/agent/module_data.rb +1 -1
- data/lib/contrast/agent/patching/policy/after_load_patch.rb +1 -1
- data/lib/contrast/agent/patching/policy/after_load_patcher.rb +2 -4
- data/lib/contrast/agent/patching/policy/method_policy.rb +28 -15
- data/lib/contrast/agent/patching/policy/method_policy_extend.rb +12 -10
- data/lib/contrast/agent/patching/policy/module_policy.rb +1 -1
- data/lib/contrast/agent/patching/policy/patch.rb +3 -7
- data/lib/contrast/agent/patching/policy/patch_status.rb +2 -26
- data/lib/contrast/agent/patching/policy/patcher.rb +2 -6
- data/lib/contrast/agent/patching/policy/policy.rb +1 -1
- data/lib/contrast/agent/patching/policy/policy_node.rb +1 -1
- data/lib/contrast/agent/patching/policy/trigger_node.rb +1 -1
- data/lib/contrast/agent/protect/input_analyzer/input_analyzer.rb +94 -0
- data/lib/contrast/agent/protect/policy/applies_command_injection_rule.rb +1 -1
- data/lib/contrast/agent/protect/policy/applies_deserialization_rule.rb +1 -1
- data/lib/contrast/agent/protect/policy/applies_no_sqli_rule.rb +1 -1
- data/lib/contrast/agent/protect/policy/applies_path_traversal_rule.rb +1 -1
- data/lib/contrast/agent/protect/policy/applies_sqli_rule.rb +1 -1
- data/lib/contrast/agent/protect/policy/applies_xxe_rule.rb +1 -1
- data/lib/contrast/agent/protect/policy/policy.rb +1 -1
- data/lib/contrast/agent/protect/policy/rule_applicator.rb +1 -1
- data/lib/contrast/agent/protect/policy/trigger_node.rb +1 -1
- data/lib/contrast/agent/protect/rule/base.rb +29 -2
- data/lib/contrast/agent/protect/rule/base_service.rb +11 -2
- data/lib/contrast/agent/protect/rule/cmd_injection.rb +3 -1
- data/lib/contrast/agent/protect/rule/default_scanner.rb +1 -1
- data/lib/contrast/agent/protect/rule/deserialization.rb +7 -1
- data/lib/contrast/agent/protect/rule/http_method_tampering.rb +6 -2
- data/lib/contrast/agent/protect/rule/no_sqli/mongo_no_sql_scanner.rb +1 -1
- data/lib/contrast/agent/protect/rule/no_sqli.rb +2 -1
- data/lib/contrast/agent/protect/rule/path_traversal.rb +2 -1
- data/lib/contrast/agent/protect/rule/sql_sample_builder.rb +1 -1
- data/lib/contrast/agent/protect/rule/sqli/default_sql_scanner.rb +1 -1
- data/lib/contrast/agent/protect/rule/sqli/mysql_sql_scanner.rb +1 -1
- data/lib/contrast/agent/protect/rule/sqli/postgres_sql_scanner.rb +2 -2
- data/lib/contrast/agent/protect/rule/sqli/sqli_input_classification.rb +124 -0
- data/lib/contrast/agent/protect/rule/sqli/sqli_worth_watching.rb +121 -0
- data/lib/contrast/agent/protect/rule/sqli/sqlite_sql_scanner.rb +1 -1
- data/lib/contrast/agent/protect/rule/sqli.rb +34 -1
- data/lib/contrast/agent/protect/rule/unsafe_file_upload.rb +1 -1
- data/lib/contrast/agent/protect/rule/xss.rb +1 -1
- data/lib/contrast/agent/protect/rule/xxe/entity_wrapper.rb +1 -1
- data/lib/contrast/agent/protect/rule/xxe.rb +5 -1
- data/lib/contrast/agent/protect/rule.rb +1 -1
- data/lib/contrast/agent/reaction_processor.rb +1 -1
- data/lib/contrast/agent/reporting/input_analysis/input_analysis.rb +44 -0
- data/lib/contrast/agent/reporting/input_analysis/input_analysis_result.rb +115 -0
- data/lib/contrast/agent/reporting/input_analysis/input_type.rb +44 -0
- data/lib/contrast/agent/reporting/input_analysis/score_level.rb +21 -0
- data/lib/contrast/agent/reporting/report.rb +8 -1
- data/lib/contrast/agent/reporting/reporter.rb +27 -47
- data/lib/contrast/agent/reporting/reporting_events/application_inventory.rb +49 -0
- data/lib/contrast/agent/reporting/reporting_events/application_update.rb +82 -0
- data/lib/contrast/agent/reporting/reporting_events/architecture_component.rb +80 -0
- data/lib/contrast/agent/reporting/reporting_events/discovered_route.rb +59 -0
- data/lib/contrast/agent/reporting/reporting_events/finding.rb +181 -43
- data/lib/contrast/agent/reporting/reporting_events/finding_event.rb +293 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_object.rb +94 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_parent_object.rb +39 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_property.rb +40 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_signature.rb +110 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_source.rb +61 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_stack.rb +71 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_taint_range.rb +60 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_request.rb +94 -0
- data/lib/contrast/agent/reporting/reporting_events/library_discovery.rb +93 -0
- data/lib/contrast/agent/reporting/reporting_events/library_usage_observation.rb +50 -0
- data/lib/contrast/agent/reporting/reporting_events/observed_library_usage.rb +54 -0
- data/lib/contrast/agent/reporting/reporting_events/observed_route.rb +66 -0
- data/lib/contrast/agent/reporting/reporting_events/poll.rb +29 -0
- data/lib/contrast/agent/reporting/reporting_events/preflight.rb +20 -6
- data/lib/contrast/agent/reporting/reporting_events/preflight_message.rb +36 -17
- data/lib/contrast/agent/reporting/reporting_events/reporting_event.rb +29 -18
- data/lib/contrast/agent/reporting/reporting_events/route_coverage.rb +76 -0
- data/lib/contrast/agent/reporting/reporting_events/route_discovery.rb +67 -0
- data/lib/contrast/agent/reporting/reporting_events/route_discovery_observation.rb +65 -0
- data/lib/contrast/agent/reporting/reporting_events/server_activity.rb +52 -0
- data/lib/contrast/agent/reporting/reporting_events/trace_event_source.rb +30 -0
- data/lib/contrast/agent/reporting/reporting_utilities/audit.rb +32 -15
- data/lib/contrast/agent/reporting/reporting_utilities/dtm_message.rb +67 -0
- data/lib/contrast/agent/reporting/reporting_utilities/endpoints.rb +164 -0
- data/lib/contrast/agent/reporting/reporting_utilities/headers.rb +55 -0
- data/lib/contrast/agent/reporting/reporting_utilities/reporter_client.rb +75 -156
- data/lib/contrast/agent/reporting/reporting_utilities/reporter_client_utils.rb +162 -0
- data/lib/contrast/agent/reporting/reporting_utilities/reporting_storage.rb +1 -1
- data/lib/contrast/agent/reporting/reporting_utilities/response.rb +30 -0
- data/lib/contrast/agent/reporting/reporting_utilities/response_handler.rb +57 -0
- data/lib/contrast/agent/reporting/reporting_utilities/response_handler_utils.rb +208 -0
- data/lib/contrast/agent/reporting/settings/application_settings.rb +67 -0
- data/lib/contrast/agent/reporting/settings/assess.rb +45 -0
- data/lib/contrast/agent/reporting/settings/assess_server_feature.rb +136 -0
- data/lib/contrast/agent/reporting/settings/exclusions.rb +123 -0
- data/lib/contrast/agent/reporting/settings/protect.rb +89 -0
- data/lib/contrast/agent/reporting/settings/protect_server_feature.rb +243 -0
- data/lib/contrast/agent/reporting/settings/reaction.rb +30 -0
- data/lib/contrast/agent/reporting/settings/server_features.rb +78 -0
- data/lib/contrast/agent/request.rb +44 -3
- data/lib/contrast/agent/request_context.rb +25 -7
- data/lib/contrast/agent/request_context_extend.rb +109 -7
- data/lib/contrast/agent/request_handler.rb +41 -5
- data/lib/contrast/agent/response.rb +23 -15
- data/lib/contrast/agent/rule_set.rb +1 -1
- data/lib/contrast/agent/scope.rb +103 -108
- data/lib/contrast/agent/service_heartbeat.rb +46 -3
- data/lib/contrast/agent/startup_metrics_telemetry_event.rb +34 -7
- data/lib/contrast/agent/static_analysis.rb +13 -3
- data/lib/contrast/agent/telemetry.rb +1 -1
- data/lib/contrast/agent/telemetry_event.rb +1 -1
- data/lib/contrast/agent/thread.rb +1 -1
- data/lib/contrast/agent/thread_watcher.rb +3 -3
- data/lib/contrast/agent/tracepoint_hook.rb +1 -4
- data/lib/contrast/agent/version.rb +2 -2
- data/lib/contrast/agent/worker_thread.rb +1 -1
- data/lib/contrast/agent.rb +4 -4
- data/lib/contrast/api/communication/connection_status.rb +1 -1
- data/lib/contrast/api/communication/messaging_queue.rb +4 -4
- data/lib/contrast/api/communication/response_processor.rb +9 -5
- data/lib/contrast/api/communication/service_lifecycle.rb +1 -1
- data/lib/contrast/api/communication/socket.rb +1 -1
- data/lib/contrast/api/communication/socket_client.rb +4 -1
- data/lib/contrast/api/communication/speedracer.rb +1 -1
- data/lib/contrast/api/communication/tcp_socket.rb +1 -1
- data/lib/contrast/api/communication/unix_socket.rb +1 -1
- data/lib/contrast/api/communication.rb +1 -1
- data/lib/contrast/api/decorators/address.rb +1 -1
- data/lib/contrast/api/decorators/agent_startup.rb +1 -1
- data/lib/contrast/api/decorators/application_settings.rb +1 -1
- data/lib/contrast/api/decorators/application_startup.rb +1 -1
- data/lib/contrast/api/decorators/application_update.rb +1 -1
- data/lib/contrast/api/decorators/architecture_component.rb +36 -0
- data/lib/contrast/api/decorators/bot_blocker.rb +37 -0
- data/lib/contrast/api/decorators/finding.rb +1 -17
- data/lib/contrast/api/decorators/http_request.rb +3 -2
- data/lib/contrast/api/decorators/input_analysis.rb +1 -1
- data/lib/contrast/api/decorators/instrumentation_mode.rb +1 -1
- data/lib/contrast/api/decorators/ip_denylist.rb +37 -0
- data/lib/contrast/api/decorators/library.rb +1 -1
- data/lib/contrast/api/decorators/library_usage_update.rb +1 -1
- data/lib/contrast/api/decorators/message.rb +1 -1
- data/lib/contrast/api/decorators/rasp_rule_sample.rb +30 -1
- data/lib/contrast/api/decorators/route_coverage.rb +1 -1
- data/lib/contrast/api/decorators/server_features.rb +1 -1
- data/lib/contrast/api/decorators/trace_event.rb +1 -1
- data/lib/contrast/api/decorators/trace_event_object.rb +1 -1
- data/lib/contrast/api/decorators/trace_event_signature.rb +1 -1
- data/lib/contrast/api/decorators/trace_taint_range.rb +1 -1
- data/lib/contrast/api/decorators/trace_taint_range_tags.rb +1 -1
- data/lib/contrast/api/decorators/user_input.rb +12 -2
- data/lib/contrast/api/decorators/virtual_patch.rb +34 -0
- data/lib/contrast/api/decorators.rb +2 -1
- data/lib/contrast/api.rb +1 -1
- data/lib/contrast/components/agent.rb +5 -24
- data/lib/contrast/components/api.rb +18 -9
- data/lib/contrast/components/app_context.rb +2 -1
- data/lib/contrast/components/app_context_extend.rb +1 -1
- data/lib/contrast/components/assess.rb +12 -8
- data/lib/contrast/components/base.rb +1 -1
- data/lib/contrast/components/config.rb +30 -15
- data/lib/contrast/components/contrast_service.rb +1 -1
- data/lib/contrast/components/heap_dump.rb +1 -1
- data/lib/contrast/components/inventory.rb +5 -1
- data/lib/contrast/components/logger.rb +6 -1
- data/lib/contrast/components/protect.rb +10 -4
- data/lib/contrast/components/sampling.rb +1 -1
- data/lib/contrast/components/scope.rb +99 -92
- data/lib/contrast/components/settings.rb +25 -12
- data/lib/contrast/config/agent_configuration.rb +59 -13
- data/lib/contrast/config/api_configuration.rb +101 -13
- data/lib/contrast/config/api_proxy_configuration.rb +56 -4
- data/lib/contrast/config/application_configuration.rb +115 -16
- data/lib/contrast/config/assess_configuration.rb +107 -13
- data/lib/contrast/config/assess_rules_configuration.rb +45 -4
- data/lib/contrast/config/base_configuration.rb +2 -1
- data/lib/contrast/config/certification_configuration.rb +75 -4
- data/lib/contrast/config/env_variables.rb +1 -1
- data/lib/contrast/config/exception_configuration.rb +62 -4
- data/lib/contrast/config/heap_dump_configuration.rb +102 -18
- data/lib/contrast/config/inventory_configuration.rb +65 -4
- data/lib/contrast/config/logger_configuration.rb +47 -4
- data/lib/contrast/config/protect_configuration.rb +1 -1
- data/lib/contrast/config/protect_rule_configuration.rb +37 -10
- data/lib/contrast/config/protect_rules_configuration.rb +121 -18
- data/lib/contrast/config/request_audit_configuration.rb +69 -4
- data/lib/contrast/config/root_configuration.rb +1 -1
- data/lib/contrast/config/ruby_configuration.rb +97 -20
- data/lib/contrast/config/sampling_configuration.rb +77 -11
- data/lib/contrast/config/server_configuration.rb +57 -12
- data/lib/contrast/config/service_configuration.rb +1 -1
- data/lib/contrast/config.rb +1 -1
- data/lib/contrast/configuration.rb +7 -4
- data/lib/contrast/extension/assess/array.rb +4 -2
- data/lib/contrast/extension/assess/erb.rb +32 -5
- data/lib/contrast/extension/assess/eval_trigger.rb +3 -1
- data/lib/contrast/extension/assess/exec_trigger.rb +2 -1
- data/lib/contrast/extension/assess/fiber.rb +6 -3
- data/lib/contrast/extension/assess/hash.rb +1 -1
- data/lib/contrast/extension/assess/kernel.rb +8 -3
- data/lib/contrast/extension/assess/marshal.rb +6 -2
- data/lib/contrast/extension/assess/regexp.rb +8 -2
- data/lib/contrast/extension/assess/string.rb +8 -2
- data/lib/contrast/extension/assess.rb +1 -1
- data/lib/contrast/extension/delegator.rb +1 -1
- data/lib/contrast/extension/extension.rb +2 -4
- data/lib/contrast/extension/inventory.rb +1 -1
- data/lib/contrast/extension/module.rb +1 -1
- data/lib/contrast/extension/protect/psych.rb +1 -1
- data/lib/contrast/extension/protect.rb +1 -1
- data/lib/contrast/extension/thread.rb +32 -13
- data/lib/contrast/framework/base_support.rb +5 -1
- data/lib/contrast/framework/grape/support.rb +25 -1
- data/lib/contrast/framework/manager.rb +26 -5
- data/lib/contrast/framework/manager_extend.rb +1 -1
- data/lib/contrast/framework/platform_version.rb +1 -1
- data/lib/contrast/framework/rack/patch/session_cookie.rb +1 -1
- data/lib/contrast/framework/rack/patch/support.rb +1 -1
- data/lib/contrast/framework/rack/support.rb +1 -1
- data/lib/contrast/framework/rails/patch/action_controller_live_buffer.rb +1 -1
- data/lib/contrast/framework/rails/patch/assess_configuration.rb +1 -1
- data/lib/contrast/framework/rails/patch/rails_application_configuration.rb +1 -1
- data/lib/contrast/framework/rails/patch/support.rb +1 -1
- data/lib/contrast/framework/rails/railtie.rb +1 -1
- data/lib/contrast/framework/rails/support.rb +46 -2
- data/lib/contrast/framework/sinatra/support.rb +24 -2
- data/lib/contrast/funchook/funchook.rb +21 -18
- data/lib/contrast/logger/application.rb +1 -1
- data/lib/contrast/logger/cef_log.rb +151 -0
- data/lib/contrast/logger/format.rb +1 -1
- data/lib/contrast/logger/log.rb +1 -1
- data/lib/contrast/logger/request.rb +1 -1
- data/lib/contrast/logger/time.rb +1 -1
- data/lib/contrast/security_exception.rb +1 -1
- data/lib/contrast/tasks/config.rb +1 -1
- data/lib/contrast/tasks/service.rb +1 -1
- data/lib/contrast/utils/assess/propagation_method_utils.rb +1 -1
- data/lib/contrast/utils/assess/property/tagged_utils.rb +1 -1
- data/lib/contrast/utils/assess/sampling_util.rb +4 -4
- data/lib/contrast/utils/assess/source_method_utils.rb +1 -1
- data/lib/contrast/utils/assess/split_utils.rb +23 -0
- data/lib/contrast/utils/assess/tracking_util.rb +1 -1
- data/lib/contrast/utils/assess/trigger_method_utils.rb +3 -2
- data/lib/contrast/utils/class_util.rb +1 -1
- data/lib/contrast/utils/duck_utils.rb +1 -1
- data/lib/contrast/utils/env_configuration_item.rb +2 -2
- data/lib/contrast/utils/exclude_key.rb +1 -1
- data/lib/contrast/utils/findings.rb +5 -2
- data/lib/contrast/utils/hash_digest.rb +44 -6
- data/lib/contrast/utils/hash_digest_extend.rb +44 -1
- data/lib/contrast/utils/head_dump_utils_extend.rb +1 -1
- data/lib/contrast/utils/heap_dump_util.rb +1 -1
- data/lib/contrast/utils/invalid_configuration_util.rb +6 -5
- data/lib/contrast/utils/io_util.rb +1 -1
- data/lib/contrast/utils/job_servers_running.rb +1 -1
- data/lib/contrast/utils/log_utils.rb +115 -1
- data/lib/contrast/utils/lru_cache.rb +1 -1
- data/lib/contrast/utils/metrics_hash.rb +2 -2
- data/lib/contrast/utils/middleware_utils.rb +7 -8
- data/lib/contrast/utils/net_http_base.rb +26 -16
- data/lib/contrast/utils/object_share.rb +1 -6
- data/lib/contrast/utils/os.rb +9 -5
- data/lib/contrast/utils/patching/policy/patch_utils.rb +62 -102
- data/lib/contrast/utils/patching/policy/patcher_utils.rb +1 -1
- data/lib/contrast/utils/preflight_util.rb +1 -1
- data/lib/contrast/utils/request_utils.rb +9 -1
- data/lib/contrast/utils/resource_loader.rb +1 -1
- data/lib/contrast/utils/response_utils.rb +1 -1
- data/lib/contrast/utils/sha256_builder.rb +1 -1
- data/lib/contrast/utils/stack_trace_utils.rb +1 -1
- data/lib/contrast/utils/string_utils.rb +69 -67
- data/lib/contrast/utils/tag_util.rb +2 -1
- data/lib/contrast/utils/telemetry.rb +1 -1
- data/lib/contrast/utils/telemetry_client.rb +1 -1
- data/lib/contrast/utils/telemetry_identifier.rb +1 -1
- data/lib/contrast/utils/thread_tracker.rb +1 -1
- data/lib/contrast/utils/timer.rb +1 -1
- data/lib/contrast-agent.rb +1 -1
- data/lib/contrast.rb +5 -4
- data/resources/assess/policy.json +10 -0
- data/ruby-agent.gemspec +4 -5
- data/service_executables/VERSION +1 -1
- data/service_executables/linux/contrast-service +0 -0
- data/service_executables/mac/contrast-service +0 -0
- metadata +96 -40
- data/ext/cs__assess_active_record_named/cs__active_record_named.c +0 -46
- data/ext/cs__assess_active_record_named/cs__active_record_named.h +0 -11
- data/lib/contrast/agent/assess/policy/rewriter_patch.rb +0 -95
- data/lib/contrast/agent/class_reopener.rb +0 -258
- data/lib/contrast/agent/rewriter.rb +0 -259
- data/lib/contrast/extension/kernel.rb +0 -54
- data/lib/contrast/framework/rails/rewrite/action_controller_railties_helper_inherited.rb +0 -37
- data/lib/contrast/framework/rails/rewrite/active_record_attribute_methods_read.rb +0 -41
- data/lib/contrast/framework/rails/rewrite/active_record_named.rb +0 -75
- data/lib/contrast/framework/rails/rewrite/active_record_time_zone_inherited.rb +0 -35
- data/lib/contrast/utils/ruby_ast_rewriter.rb +0 -82
- data/lib/contrast/utils/substitution_utils.rb +0 -167
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/components/logger'
|
@@ -22,18 +22,22 @@ module Contrast
|
|
22
22
|
# This method will be handling the auditing of the requests and responses we send to SpeedRacer. If the audit
|
23
23
|
# feature is enabled, we'll log to file the request and/or response protobuf objects.
|
24
24
|
#
|
25
|
-
# @param event [Contrast::Api::Dtm] One of the DTMs valid for the
|
26
|
-
# Contrast::Api::Dtm::Message|Contrast::
|
25
|
+
# @param event [Contrast::Api::Dtm|Contrast::Agent::Reporting::ReportingEvent] One of the DTMs valid for the
|
26
|
+
# event field of Contrast::Api::Dtm::Message|Contrast::Agent::Reporting::ReportingEvent
|
27
27
|
# @param response_data [Contrast::Api::Settings::AgentSettings,nil]
|
28
28
|
def audit_event event, response_data = nil
|
29
|
-
return unless ::Contrast::API.request_audit_requests || ::Contrast::API.request_audit_responses
|
29
|
+
return unless ::Contrast::API.request_audit_requests? || ::Contrast::API.request_audit_responses?
|
30
30
|
|
31
31
|
type = event.cs__respond_to?(:file_name) ? event.file_name : event.cs__class.cs__name.to_s.downcase
|
32
|
-
if ::Contrast::API.request_audit_requests
|
33
|
-
data = event.
|
32
|
+
if ::Contrast::API.request_audit_requests?
|
33
|
+
data = if event.cs__class < Contrast::Agent::Reporting::ReportingEvent
|
34
|
+
event.to_controlled_hash.to_json
|
35
|
+
else # TODO: RUBY-1438 -- remove
|
36
|
+
event.to_s
|
37
|
+
end
|
34
38
|
log_data :request, type, data if data
|
35
39
|
end
|
36
|
-
return unless ::Contrast::API.request_audit_responses
|
40
|
+
return unless ::Contrast::API.request_audit_responses?
|
37
41
|
|
38
42
|
data = response_data.to_s || event.http_response.try(:body) || 'There is no available response'
|
39
43
|
log_data :response, type, data
|
@@ -63,24 +67,30 @@ module Contrast
|
|
63
67
|
# destination. In that case, take no action
|
64
68
|
return unless destination
|
65
69
|
|
66
|
-
filename = "#{ time }-#{ data_type.gsub('::', '_') }-teamserver.json"
|
70
|
+
filename = "#{ time }-#{ Thread.current.object_id }-#{ data_type.gsub('::', '_') }-teamserver.json"
|
67
71
|
filepath = File.join(destination, filename)
|
68
72
|
# Here is use append mode, because of a slightly possibility of overwriting an existing file
|
69
73
|
File.open(filepath, 'a') do |f|
|
70
|
-
|
74
|
+
if data_type.include?('reporting')
|
75
|
+
f.write(Contrast::Utils::StringUtils.force_utf8(data))
|
76
|
+
else
|
77
|
+
f.write({ data_type: Contrast::Utils::StringUtils.force_utf8(data) }.to_json)
|
78
|
+
end
|
71
79
|
end
|
80
|
+
rescue StandardError => e
|
81
|
+
logger.warn('Saving audit failed', e: e)
|
72
82
|
end
|
73
83
|
|
74
84
|
# Here we will generate the directories for the requests and responses
|
75
85
|
def generate_paths
|
76
86
|
message_directories = File.expand_path(path_to_audits)
|
77
|
-
|
87
|
+
make_directory(message_directories) unless Dir.exist?(message_directories)
|
78
88
|
|
79
89
|
requests_destination = File.expand_path(File.join(message_directories, '/requests'))
|
80
90
|
responses_destination = File.expand_path(File.join(message_directories, '/responses'))
|
81
91
|
|
82
|
-
|
83
|
-
|
92
|
+
make_directory(requests_destination) if enabled_for_requests? && !Dir.exist?(requests_destination)
|
93
|
+
make_directory(responses_destination) if enabled_for_responses? && !Dir.exist?(responses_destination)
|
84
94
|
|
85
95
|
@path_for_requests ||= requests_destination if enabled_for_requests?
|
86
96
|
@path_for_responses ||= responses_destination if enabled_for_responses?
|
@@ -88,10 +98,17 @@ module Contrast
|
|
88
98
|
logger.warn('Generating the paths failed with: ', e: e)
|
89
99
|
end
|
90
100
|
|
101
|
+
# Make the directory provided, including any required intermediary directories.
|
102
|
+
# We do this here in order to make allow us to easily override directory
|
103
|
+
# creation while testing.
|
104
|
+
def make_directory directory
|
105
|
+
FileUtils.mkdir_p(directory)
|
106
|
+
end
|
107
|
+
|
91
108
|
# Retrieves the configuration value if the request audit is enabled
|
92
109
|
# @return [Boolean]
|
93
110
|
def enabled?
|
94
|
-
::Contrast::API.request_audit_enable
|
111
|
+
::Contrast::API.request_audit_enable?
|
95
112
|
end
|
96
113
|
|
97
114
|
# The boolean values for the requests and the responses should be taken under
|
@@ -104,13 +121,13 @@ module Contrast
|
|
104
121
|
# Retrieve the configuration value if the audit for requests is enabled
|
105
122
|
# @return [Boolean]
|
106
123
|
def enabled_for_requests?
|
107
|
-
::Contrast::API.request_audit_requests
|
124
|
+
::Contrast::API.request_audit_requests?
|
108
125
|
end
|
109
126
|
|
110
127
|
# Retrieve the configuration value if the audit for responses is enabled
|
111
128
|
# @return [Boolean]
|
112
129
|
def enabled_for_responses?
|
113
|
-
::Contrast::API.request_audit_requests
|
130
|
+
::Contrast::API.request_audit_requests?
|
114
131
|
end
|
115
132
|
|
116
133
|
# Retrieve the configuration value for the path of the audits
|
@@ -0,0 +1,67 @@
|
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
+
# frozen_string_literal: true
|
3
|
+
|
4
|
+
require 'contrast/agent/reporting/reporting_events/server_activity'
|
5
|
+
require 'contrast/api/dtm.pb'
|
6
|
+
|
7
|
+
module Contrast
|
8
|
+
module Agent
|
9
|
+
module Reporting
|
10
|
+
# Util module for checking DTM message type. It temporarily allows for the conversion from a DTM to an
|
11
|
+
# EventReport.
|
12
|
+
# TODO: RUBY-1438 -- remove
|
13
|
+
module DtmMessage
|
14
|
+
class << self
|
15
|
+
# Checks if the message is of Contrast::Api::Dtm::ServerActivity class
|
16
|
+
#
|
17
|
+
# @param dtm [Contrast::Api::Dtm::ServerActivity, Object]
|
18
|
+
# @return [Boolean]
|
19
|
+
def server_activity? dtm
|
20
|
+
dtm.cs__is_a?(Contrast::Api::Dtm::ServerActivity)
|
21
|
+
end
|
22
|
+
|
23
|
+
# Checks if the message is a Hash of Contrast::Api::Dtm::LibraryUsageUpdate class
|
24
|
+
#
|
25
|
+
# @param message [Protobuf::Field::FieldHash<String,::Contrast::Api::Dtm::LibraryUsageUpdate>]
|
26
|
+
# @return [Boolean]
|
27
|
+
def library_usage? message
|
28
|
+
message.cs__is_a?(Protobuf::Field::FieldHash) &&
|
29
|
+
message.values[0].cs__is_a?(Contrast::Api::Dtm::LibraryUsageUpdate)
|
30
|
+
end
|
31
|
+
|
32
|
+
# Checks if the message is of Contrast::Api::Dtm::ApplicationUpdate class
|
33
|
+
#
|
34
|
+
# @param dtm [Contrast::Api::Dtm::ApplicationUpdate,Object]
|
35
|
+
# @return [Boolean]
|
36
|
+
def application_update? dtm
|
37
|
+
dtm.cs__is_a?(Contrast::Api::Dtm::ApplicationUpdate)
|
38
|
+
end
|
39
|
+
|
40
|
+
# @param dtm [Contrast::Api::Dtm::Finding,Object]
|
41
|
+
# @return [Boolean]
|
42
|
+
def finding? dtm
|
43
|
+
dtm.cs__is_a?(Contrast::Api::Dtm::Finding)
|
44
|
+
end
|
45
|
+
|
46
|
+
# Converts DTM message to Reporting Event for those messages that have conversion methods crated. We use this
|
47
|
+
# as we work to move away from requiring the Service.
|
48
|
+
#
|
49
|
+
# @param dtm [Contrast::Api::Dtm]
|
50
|
+
# @return event [Contrast::Agent::Reporting::ReportingEvent, nil]
|
51
|
+
def dtm_to_event dtm
|
52
|
+
# For the ServerActivity we need to create and send empty body only. This is done because we need the
|
53
|
+
# response from TS.
|
54
|
+
return Contrast::Agent::Reporting::ServerActivity.new if server_activity?(dtm)
|
55
|
+
|
56
|
+
# For the others, we convert them.
|
57
|
+
return Contrast::Agent::Reporting::ObservedLibraryUsage.convert(dtm) if library_usage?(dtm)
|
58
|
+
return Contrast::Agent::Reporting::ApplicationUpdate.convert(dtm) if application_update?(dtm)
|
59
|
+
return Contrast::Agent::Reporting::Finding.convert(dtm) if finding?(dtm)
|
60
|
+
|
61
|
+
nil
|
62
|
+
end
|
63
|
+
end
|
64
|
+
end
|
65
|
+
end
|
66
|
+
end
|
67
|
+
end
|
@@ -0,0 +1,164 @@
|
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
+
# frozen_string_literal: true
|
3
|
+
|
4
|
+
require 'contrast/components/logger'
|
5
|
+
require 'contrast/utils/object_share'
|
6
|
+
require 'base64'
|
7
|
+
|
8
|
+
module Contrast
|
9
|
+
module Agent
|
10
|
+
module Reporting
|
11
|
+
# This is the class which will hold up all the Endpoints we use for the direct report from the agent. It builds
|
12
|
+
# the full URLs needed for communication.
|
13
|
+
module Endpoints
|
14
|
+
extend Contrast::Components::Logger::InstanceMethods
|
15
|
+
|
16
|
+
APP_LANGUAGE = Contrast::Utils::ObjectShare::RUBY.upcase.cs__freeze
|
17
|
+
ENDPOINT_VERSION = '/v1.0'.cs__freeze
|
18
|
+
NG_ENDPOINTS = {
|
19
|
+
application_activity: "#{ Contrast::API.api_url }/api/ng/activity/application",
|
20
|
+
application_create: "#{ Contrast::API.api_url }/api/ng/applications/create",
|
21
|
+
agent_startup: "#{ Contrast::API.api_url }/api/ng/servers/"
|
22
|
+
}.cs__freeze
|
23
|
+
|
24
|
+
class << self
|
25
|
+
# @return [String,nil]
|
26
|
+
def application_startup
|
27
|
+
with_rescue do
|
28
|
+
"#{ application_endpoint }/startup".cs__freeze
|
29
|
+
end
|
30
|
+
end
|
31
|
+
|
32
|
+
# @return [String,nil]
|
33
|
+
def application_settings
|
34
|
+
with_rescue do
|
35
|
+
"#{ application_endpoint }/settings".cs__freeze
|
36
|
+
end
|
37
|
+
end
|
38
|
+
|
39
|
+
# @return [String,nil]
|
40
|
+
def application_inventory
|
41
|
+
with_rescue do
|
42
|
+
"#{ application_endpoint }/inventory".cs__freeze
|
43
|
+
end
|
44
|
+
end
|
45
|
+
|
46
|
+
# @return [String,nil]
|
47
|
+
def library_usage
|
48
|
+
with_rescue do
|
49
|
+
"#{ application_endpoint }/library-usage".cs__freeze
|
50
|
+
end
|
51
|
+
end
|
52
|
+
|
53
|
+
# @return [String,nil]
|
54
|
+
def heartbeat
|
55
|
+
with_rescue do
|
56
|
+
"#{ application_endpoint }/heartbeat".cs__freeze
|
57
|
+
end
|
58
|
+
end
|
59
|
+
|
60
|
+
# @return [String,nil]
|
61
|
+
def observed_route
|
62
|
+
with_rescue do
|
63
|
+
"#{ route_endpoint }/observed".cs__freeze
|
64
|
+
end
|
65
|
+
end
|
66
|
+
|
67
|
+
# @return [String,nil]
|
68
|
+
def trace_observed
|
69
|
+
with_rescue do
|
70
|
+
"#{ trace_endpoint }/observed".cs__freeze
|
71
|
+
end
|
72
|
+
end
|
73
|
+
|
74
|
+
private
|
75
|
+
|
76
|
+
# Returns the URL needed to connect to endpoints in TeamServer required for application related information.
|
77
|
+
#
|
78
|
+
# @return [String]
|
79
|
+
def application_endpoint
|
80
|
+
@_application_endpoint ||= "#{ Contrast::API.api_url }/agents#{ ENDPOINT_VERSION }/applications"\
|
81
|
+
"#{ server_path_segment }#{ application_path_segment }"
|
82
|
+
end
|
83
|
+
|
84
|
+
# Returns the URL needed to connect to endpoints in TeamServer required for route related information.
|
85
|
+
#
|
86
|
+
# @return [String]
|
87
|
+
def route_endpoint
|
88
|
+
@_route_endpoint ||= "#{ Contrast::API.api_url }/agents#{ ENDPOINT_VERSION }/routes"\
|
89
|
+
"#{ server_path_segment }#{ application_path_segment }"
|
90
|
+
end
|
91
|
+
|
92
|
+
# Returns the URL needed to connect to endpoints in TeamServer required for server related information.
|
93
|
+
#
|
94
|
+
# @return [String]
|
95
|
+
def server_endpoint
|
96
|
+
@_server_endpoint ||= "#{ Contrast::API.api_url }/agents#{ ENDPOINT_VERSION }/servers"\
|
97
|
+
"#{ server_path_segment }"
|
98
|
+
end
|
99
|
+
|
100
|
+
# Returns the URL needed to connect to endpoints in TeamServer required for trace/finding related information.
|
101
|
+
#
|
102
|
+
# @return [String]
|
103
|
+
def trace_endpoint
|
104
|
+
@_trace_endpoint ||= "#{ Contrast::API.api_url }/agents#{ ENDPOINT_VERSION }/traces"\
|
105
|
+
"#{ server_path_segment }#{ application_path_segment }"
|
106
|
+
end
|
107
|
+
|
108
|
+
# The server host, path, and type; required for endpoints that are server specific.
|
109
|
+
#
|
110
|
+
# @return [String]
|
111
|
+
def server_path_segment
|
112
|
+
@_server_path_segment ||= "/#{ Base64.urlsafe_encode64(server_host_name, padding: false) }"\
|
113
|
+
"/#{ Base64.urlsafe_encode64(server_path, padding: false) }"\
|
114
|
+
"/#{ Base64.urlsafe_encode64(server_type, padding: false) }"
|
115
|
+
end
|
116
|
+
|
117
|
+
# The application language and name; required for endpoints that are application specific.
|
118
|
+
#
|
119
|
+
# @return [String]
|
120
|
+
def application_path_segment
|
121
|
+
@_application_path_segment ||= "/#{ Base64.urlsafe_encode64(APP_LANGUAGE, padding: false) }"\
|
122
|
+
"/#{ Base64.urlsafe_encode64(app_name, padding: false) }"
|
123
|
+
end
|
124
|
+
|
125
|
+
# @return [String,nil]
|
126
|
+
def server_host_name
|
127
|
+
return @_server_host_name unless @_server_host_name.nil?
|
128
|
+
|
129
|
+
@_server_host_name = ::Contrast::APP_CONTEXT.server_name
|
130
|
+
end
|
131
|
+
|
132
|
+
# @return [String,nil]
|
133
|
+
def server_path
|
134
|
+
return @_server_path unless @_server_path.nil?
|
135
|
+
|
136
|
+
@_server_path = ::Contrast::APP_CONTEXT.server_path
|
137
|
+
end
|
138
|
+
|
139
|
+
# @return [String,nil]
|
140
|
+
def server_type
|
141
|
+
return @_server_type unless @_server_type.nil?
|
142
|
+
|
143
|
+
@_server_type = ::Contrast::APP_CONTEXT.server_type
|
144
|
+
end
|
145
|
+
|
146
|
+
# @return [String,nil]
|
147
|
+
def app_name
|
148
|
+
return @_app_name unless @_app_name.nil?
|
149
|
+
|
150
|
+
@_app_name = ::Contrast::APP_CONTEXT.app_name
|
151
|
+
end
|
152
|
+
|
153
|
+
# @return [String,nil]
|
154
|
+
def with_rescue
|
155
|
+
yield
|
156
|
+
rescue StandardError => e
|
157
|
+
logger.debug('Endpoint failed with the following error', e)
|
158
|
+
Contrast::Utils::ObjectShare::EMPTY_STRING
|
159
|
+
end
|
160
|
+
end
|
161
|
+
end
|
162
|
+
end
|
163
|
+
end
|
164
|
+
end
|
@@ -0,0 +1,55 @@
|
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
+
# frozen_string_literal: true
|
3
|
+
|
4
|
+
require 'contrast/utils/object_share'
|
5
|
+
require 'contrast/agent/version'
|
6
|
+
require 'base64'
|
7
|
+
|
8
|
+
module Contrast
|
9
|
+
module Agent
|
10
|
+
module Reporting
|
11
|
+
# This class will build the required headers for agent reporting to TS
|
12
|
+
class Headers
|
13
|
+
attr_reader :app_name, :api_key, :agent_version, :app_language, :app_path, :app_version, :authorization,
|
14
|
+
:server_name, :server_path, :server_type, :content_type, :encoding
|
15
|
+
|
16
|
+
ENCODING = 'base64'
|
17
|
+
CONTENT_TYPE = 'application/json'
|
18
|
+
|
19
|
+
include Contrast::Utils::ObjectShare
|
20
|
+
|
21
|
+
def initialize
|
22
|
+
@app_name = Base64.strict_encode64(Contrast::APP_CONTEXT.app_name)
|
23
|
+
@api_key = Contrast::API.api_key
|
24
|
+
@agent_version = [RUBY, Contrast::Agent::VERSION].join(SPACE)
|
25
|
+
@app_language = RUBY
|
26
|
+
@app_path = Base64.strict_encode64(Contrast::APP_CONTEXT.path)
|
27
|
+
@app_version = Contrast::APP_CONTEXT.app_version
|
28
|
+
@authorization = Base64.strict_encode64("#{ Contrast::API.username }:#{ Contrast::API.service_key }")
|
29
|
+
@server_name = Base64.strict_encode64(Contrast::APP_CONTEXT.server_name)
|
30
|
+
@server_path = Base64.strict_encode64(Contrast::APP_CONTEXT.server_path)
|
31
|
+
@server_type = Base64.strict_encode64(Contrast::APP_CONTEXT.server_type)
|
32
|
+
@content_type = CONTENT_TYPE
|
33
|
+
@encoding = ENCODING
|
34
|
+
end
|
35
|
+
|
36
|
+
def to_hash
|
37
|
+
{
|
38
|
+
app_name: @app_name,
|
39
|
+
api_key: @api_key,
|
40
|
+
agent_version: @agent_version,
|
41
|
+
app_language: @app_language,
|
42
|
+
app_path: @app_path,
|
43
|
+
app_version: @app_version,
|
44
|
+
authorization: @authorization,
|
45
|
+
server_name: @server_name,
|
46
|
+
server_path: @server_path,
|
47
|
+
server_type: @server_type,
|
48
|
+
content_type: @content_type,
|
49
|
+
encoding: @encoding
|
50
|
+
}.cs__freeze
|
51
|
+
end
|
52
|
+
end
|
53
|
+
end
|
54
|
+
end
|
55
|
+
end
|
@@ -1,167 +1,86 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'json'
|
5
5
|
require 'net/http'
|
6
6
|
require 'contrast/components/logger'
|
7
7
|
require 'contrast/utils/net_http_base'
|
8
|
-
require 'contrast/
|
9
|
-
require 'contrast/agent/reporting/
|
10
|
-
require 'contrast/agent/reporting/
|
8
|
+
require 'contrast/api/communication/connection_status'
|
9
|
+
require 'contrast/agent/reporting/reporting_utilities/response_handler'
|
10
|
+
require 'contrast/agent/reporting/reporting_utilities/reporter_client_utils'
|
11
|
+
require 'contrast/agent/reporting/reporting_utilities/endpoints'
|
12
|
+
require 'contrast/agent/reporting/reporting_utilities/headers'
|
11
13
|
|
12
14
|
module Contrast
|
13
|
-
module
|
14
|
-
|
15
|
-
|
16
|
-
|
17
|
-
|
18
|
-
|
19
|
-
|
20
|
-
|
21
|
-
|
22
|
-
|
23
|
-
|
24
|
-
|
25
|
-
|
26
|
-
|
27
|
-
|
28
|
-
|
29
|
-
|
30
|
-
|
31
|
-
|
32
|
-
|
33
|
-
|
34
|
-
|
35
|
-
|
36
|
-
|
37
|
-
|
38
|
-
|
39
|
-
#
|
40
|
-
|
41
|
-
|
42
|
-
|
43
|
-
|
44
|
-
|
45
|
-
|
46
|
-
|
47
|
-
|
48
|
-
|
49
|
-
|
50
|
-
|
51
|
-
|
52
|
-
|
53
|
-
|
54
|
-
|
55
|
-
|
56
|
-
|
57
|
-
|
58
|
-
|
59
|
-
|
60
|
-
|
61
|
-
|
62
|
-
|
63
|
-
|
64
|
-
|
65
|
-
|
66
|
-
|
67
|
-
|
68
|
-
|
69
|
-
|
70
|
-
|
71
|
-
|
72
|
-
|
73
|
-
|
74
|
-
|
75
|
-
|
76
|
-
|
77
|
-
|
78
|
-
|
79
|
-
|
80
|
-
|
81
|
-
|
82
|
-
def build_headers request
|
83
|
-
@app_version = @headers[:app_version]
|
84
|
-
request['API-Key'] = @headers[:api_key]
|
85
|
-
request['Application-Language'] = @headers[:app_language]
|
86
|
-
request['Application-Name'] = @headers[:app_name]
|
87
|
-
request['Application-Path'] = @headers[:app_path]
|
88
|
-
request['Application-Version'] = @app_version if @app_version
|
89
|
-
request['Authorization'] = @headers[:authorization]
|
90
|
-
request['Content-Type'] = @headers[:content_type]
|
91
|
-
request['Server-Name'] = @headers[:server_name]
|
92
|
-
request['Server-Path'] = @headers[:server_path]
|
93
|
-
request['Server-Type'] = @headers[:server_type]
|
94
|
-
request['X-Contrast-Agent'] = @headers[:agent_version]
|
95
|
-
request['X-Contrast-Header-Encoding'] = @headers[:encoding]
|
96
|
-
request
|
97
|
-
end
|
98
|
-
|
99
|
-
# build the request headers and assign endpoint
|
100
|
-
#
|
101
|
-
# @param endpoint [String] endpoint to report to
|
102
|
-
# @param event [Contrast::Api::Dtm,Contrast::Agent::Reporting::ReportingEvent]
|
103
|
-
# One of the DTMs valid for the event field of Contrast::Api::Dtm::Message|Contrast::Api::Dtm::Activity
|
104
|
-
# @return [Net::HTTP::Post]
|
105
|
-
def build_request endpoint, event
|
106
|
-
@request = build_headers Net::HTTP::Post.new(endpoint)
|
107
|
-
@request.body = if event.cs__is_a?(Contrast::Agent::Reporting::ReportingEvent)
|
108
|
-
event.to_controlled_hash.to_json
|
109
|
-
else
|
110
|
-
event.to_json
|
111
|
-
end
|
112
|
-
@request
|
113
|
-
end
|
114
|
-
|
115
|
-
# log the event sent immediately
|
116
|
-
#
|
117
|
-
# @param event [Contrast::Api::Dtm,Contrast::Agent::Reporting::ReportingEvent] One of the DTMs valid for the
|
118
|
-
# event field of Contrast::Api::Dtm::Message|Contrast::Api::Dtm::Activity
|
119
|
-
def log_send_event event
|
120
|
-
logger.debug('Immediately sending event.', event_id: event.__id__, event_type: event.cs__class.cs__name)
|
121
|
-
end
|
122
|
-
|
123
|
-
# Sent different events to different endpoints
|
124
|
-
#
|
125
|
-
# @param event [Contrast::Api::Dtm,Contrast::Agent::Reporting::ReportingEvent] Main reporting event, all events
|
126
|
-
# inherit it
|
127
|
-
# @param event_type [Symbol] We'll use this symbol to match the urls
|
128
|
-
# @param connection [Net::HTTP] open connection
|
129
|
-
def send_events event, event_type, connection
|
130
|
-
logger.debug("Preparing to send #{ event_type.to_s.capitalize } messages")
|
131
|
-
request = build_request ENDPOINTS[event_type], event
|
132
|
-
response = connection.request(request)
|
133
|
-
logger.debug("Successfully sent #{ event_type.to_s.capitalize } messages to service.") if response
|
134
|
-
response
|
135
|
-
end
|
136
|
-
|
137
|
-
# Eventually here we'll handle more response types and etc
|
138
|
-
|
139
|
-
# @param event [Contrast::Agent::Reporting::Preflight] the preflight we handle here
|
140
|
-
# @param response [Net::HTTP::Response,nil] The response we handle and read from
|
141
|
-
# @param connection [Net::HTTP] open connection
|
142
|
-
def handle_response event, response, connection
|
143
|
-
return unless event || response || connection
|
144
|
-
|
145
|
-
preflight_message = event.messages[0]
|
146
|
-
event_type = symbolized_event_type preflight_message.event_type
|
147
|
-
return unless event_type == :preflight_message
|
148
|
-
|
149
|
-
# for handling multiple findings
|
150
|
-
# we'll only extract the indexes without *
|
151
|
-
# findings_to_return = response.body.split(',').delete_if { |el| el.include?('*') }
|
152
|
-
# after that we'll do some magic and return them the same way we do for corresponding_finding
|
153
|
-
corresponding_finding = Contrast::Agent::Reporting::ReportingStorage.delete(preflight_message.hash_code)
|
154
|
-
return unless corresponding_finding
|
155
|
-
|
156
|
-
send_event corresponding_finding, connection, true
|
157
|
-
nil
|
158
|
-
end
|
159
|
-
|
160
|
-
def symbolized_event_type event_type
|
161
|
-
return unless event_type
|
162
|
-
return event_type unless event_type.cs__is_a?(String)
|
163
|
-
|
164
|
-
event_type.downcase.to_sym
|
15
|
+
module Agent
|
16
|
+
module Reporting
|
17
|
+
# This class creates a Net::HTTP client and initiates a connection to the provided result
|
18
|
+
# @attr_reader headers [Contrast::Agent::Reporting::Headers]
|
19
|
+
class ReporterClient < Contrast::Utils::NetHttpBase
|
20
|
+
attr_reader :headers
|
21
|
+
|
22
|
+
include Contrast::Agent::Reporting::Endpoints
|
23
|
+
include Contrast::Agent::Reporting::ReporterClientUtils
|
24
|
+
SERVICE_NAME = 'Reporter'
|
25
|
+
include Contrast::Components::Logger::InstanceMethods
|
26
|
+
# This method initializes the Net::HTTP client we'll need. it will validate
|
27
|
+
# the connection and make the first request. If connection is valid and response
|
28
|
+
# is available then the open connection is returned.
|
29
|
+
#
|
30
|
+
# @return [Net::HTTP, nil] Return open connection or nil
|
31
|
+
def initialize_connection
|
32
|
+
# for this client we would use proxy and custom certificate file if available
|
33
|
+
super(SERVICE_NAME, Contrast::API.api_url, true, true)
|
34
|
+
end
|
35
|
+
|
36
|
+
def initialize
|
37
|
+
@headers = Contrast::Agent::Reporting::Headers.new
|
38
|
+
super()
|
39
|
+
end
|
40
|
+
|
41
|
+
# Start the client for first time and sent startup event
|
42
|
+
#
|
43
|
+
# @param connection [Net::HTTP] open connection
|
44
|
+
def startup! connection
|
45
|
+
return if status.startup_messages_sent?
|
46
|
+
return unless Contrast::Agent::Reporter.enabled?
|
47
|
+
|
48
|
+
send_agent_startup(connection)
|
49
|
+
end
|
50
|
+
|
51
|
+
# Check event type and send it to appropriate TS endpoint
|
52
|
+
#
|
53
|
+
# @param event [Contrast::Api::Dtm,Contrast::Agent::Reporting::ReportingEvent] One of the DTMs valid
|
54
|
+
# for the event field of Contrast::Api::Dtm::Message|Contrast::Api::Dtm::Activity
|
55
|
+
# @param connection [Net::HTTP] open connection
|
56
|
+
# @param send_immediately [Boolean] flag for the logger
|
57
|
+
# @return response [Net::HTTP::Response, nil] response from TS if no response
|
58
|
+
def send_event event, connection, send_immediately = false
|
59
|
+
return unless Contrast::Agent::Reporter.enabled?
|
60
|
+
return unless connection
|
61
|
+
|
62
|
+
response = send_events(event, connection)
|
63
|
+
log_send_event event if send_immediately
|
64
|
+
response
|
65
|
+
rescue StandardError => e
|
66
|
+
handle_error event, e
|
67
|
+
end
|
68
|
+
|
69
|
+
def status
|
70
|
+
@_status ||= Contrast::Api::Communication::ConnectionStatus.new
|
71
|
+
end
|
72
|
+
|
73
|
+
def response_handler
|
74
|
+
@_response_handler ||= Contrast::Agent::Reporting::ResponseHandler.new
|
75
|
+
end
|
76
|
+
|
77
|
+
def sleep?
|
78
|
+
response_handler.sleep?
|
79
|
+
end
|
80
|
+
|
81
|
+
def wake_up
|
82
|
+
response_handler.wake_up
|
83
|
+
end
|
165
84
|
end
|
166
85
|
end
|
167
86
|
end
|