contrast-agent 4.14.0 → 5.2.0

data/lib/contrast/agent/assess/rule/response/header_rule.rb

@@ -0,0 +1,70 @@
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# frozen_string_literal: true
+
+require 'rack'
+require 'contrast/agent/reporting/reporting_utilities/dtm_message'
+require 'contrast/utils/hash_digest'
+require 'contrast/utils/preflight_util'
+require 'contrast/utils/string_utils'
+require 'contrast/agent/assess/rule/response/base_rule'
+
+module Contrast
+  module Agent
+    module Assess
+      module Rule
+        module Response
+          # These rules check the content of the HTTP Response to determine if something was set incorrectly or
+          # insecurely in it.
+          class HeaderRule < BaseRule
+            HEADER_TYPE = 'header'
+
+            # Rules discern which responses they can/should analyze.
+            #
+            # @param response [Contrast::Agent::Response] the response of the application
+            def analyze_response? response
+              super && headers?(response)
+            end
+
+            # Determine if the Response violates the Rule or not. If it does, return the evidence that proves it so.
+            #
+            # @param response [Contrast::Agent::Response] the response of the application
+            # @return [Hash, nil] the evidence required to prove the violation of the rule
+            def violated? response
+              header_value = get_header_value(response)
+              if header_value
+                return evidence(header_value) unless valid_header?(header_value)
+              else
+                return evidence(header_value) unless cs__class::DEFAULT_SAFE
+              end
+              nil
+            end
+
+            # Determine if a response has headers.
+            #
+            # @param response [Contrast::Agent::Response] the response of the application
+            # @return [Boolean]
+            def headers? response
+              response.headers&.any?
+            end
+
+            protected
+
+            def get_header_value response
+              response_headers = response.headers
+              values = response_headers.values_at(*cs__class::HEADER_KEYS, *cs__class::HEADER_KEYS.map(&:to_sym))
+              values.compact.first
+            end
+
+            # Determine if the value of the Response Header has a valid value
+            #
+            # @param header [Contrast::Agent::Response] a response header
+            # @return [Boolean] whether the header value is valid
+            def valid_header? header
+              cs__class::ACCEPTED_VALUES.any? { |val| val.match(header) }
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/contrast/agent/assess/rule/response/hsts_header_rule.rb

@@ -0,0 +1,36 @@
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# frozen_string_literal: true
+
+require 'contrast/agent/assess/rule/response/header_rule'
+require 'contrast/utils/string_utils'
+
+module Contrast
+  module Agent
+    module Assess
+      module Rule
+        module Response
+          # This rule checks if the HTTP Headers include HSTS header and ensures that the max-age value
+          # is set to a value greater than 0.
+          class HSTSHeader < HeaderRule
+            def rule_id
+              'hsts-header-missing'
+            end
+
+            protected
+
+            HEADER_KEYS = %w[Strict-Transport-Security].cs__freeze
+            ACCEPTED_VALUES = [/max-age=(\.)?\d+(\.\d*)?/].cs__freeze
+            DEFAULT_SAFE = true
+
+            def evidence data
+              # get only the value of the max-age property
+              val = data&.split('=')&.last
+              val = Contrast::Utils::ObjectShare::EMPTY_STRING if val.nil? || val == 'max-age'
+              { DATA => val }
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/contrast/agent/assess/rule/response/parameters_pollution_rule.rb

@@ -0,0 +1,61 @@
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# frozen_string_literal: true
+
+require 'contrast/agent/assess/rule/response/base_rule'
+require 'contrast/utils/string_utils'
+
+module Contrast
+  module Agent
+    module Assess
+      module Rule
+        module Response
+          # These rules check the content of the HTTP Response to determine if the body contains a form which
+          # incorrectly sets the action attribute.
+          class ParametersPollution < BaseRule
+            include BodyRule
+            def rule_id
+              'parameter-pollution'
+            end
+
+            protected
+
+            # Rules discern which responses they can/should analyze.
+            #
+            # @param response [Contrast::Agent::Response] the response of the application
+            def analyze_response? response
+              super && body?(response)
+            end
+
+            # Determine if the Response violates the Rule or not. If it does, return the evidence that proves it so.
+            #
+            # @param response [Contrast::Agent::Response] the response of the application
+            # @return [Hash, nil] the evidence required to prove the violation of the rule
+            def violated? response
+              body = response.body
+              forms = html_elements(body, FORM_START_REGEXP, true)
+              forms.each do |form|
+                # Because TeamServer will reject any subsequent form on the same page due to deduplication, we can
+                # skip out on the first violation.
+                return form if action?(form[HTML_PROP])
+              end
+              nil
+            end
+
+            def accepted_values
+              [/action="[^"]/i, /action='[^']/i, /action=[^\\'"]/i, /action=[^\s<>'"]/i].cs__freeze
+            end
+
+            def action? form
+              return true unless /action=/i.match?(form)
+
+              accepted_values.each do |off_value|
+                return false if form.match?(off_value)
+              end
+              true
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/contrast/agent/assess/rule/response/x_content_type_header_rule.rb

@@ -0,0 +1,26 @@
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# frozen_string_literal: true
+
+require 'contrast/agent/assess/rule/response/header_rule'
+require 'contrast/utils/string_utils'
+
+module Contrast
+  module Agent
+    module Assess
+      module Rule
+        module Response
+          # These rules check the content of the HTTP Response to determine if the response contains the needed header
+          class XContentType < HeaderRule
+            def rule_id
+              'xcontenttype-header-missing'
+            end
+
+            HEADER_KEYS = %w[X-Content-Type-Options].cs__freeze
+            ACCEPTED_VALUES = [/^nosniff/i].cs__freeze
+            DEFAULT_SAFE = false
+          end
+        end
+      end
+    end
+  end
+end

data/lib/contrast/agent/assess/rule/response/x_xss_protection_header_rule.rb

@@ -0,0 +1,36 @@
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# frozen_string_literal: true
+
+require 'contrast/agent/assess/rule/response/header_rule'
+require 'contrast/utils/string_utils'
+require 'contrast/agent/assess/rule/response/framework/rails_support'
+require 'rails'
+
+module Contrast
+  module Agent
+    module Assess
+      module Rule
+        module Response
+          # These rules check the content of the HTTP Response to determine if the response contains the needed header
+          class XXssProtection < HeaderRule
+            include Framework::RailsSupport
+
+            def rule_id
+              'xxssprotection-header-disabled'
+            end
+
+            HEADER_KEYS = %w[X-XSS-Protection].cs__freeze
+            ACCEPTED_VALUES = [/^1/].cs__freeze
+            DEFAULT_SAFE = true
+
+            protected
+
+            def analyze_response? response
+              !framework_supported? && super
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/contrast/agent/assess/tag.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 module Contrast

data/lib/contrast/agent/assess/tracker.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'contrast/agent/assess/finalizers/hash'

data/lib/contrast/agent/assess.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 module Contrast
@@ -10,7 +10,6 @@ module Contrast
     module Assess
       require 'contrast/agent/assess/tracker'
       require 'contrast/agent/module_data'
-      require 'contrast/agent/rewriter' if RUBY_VERSION < '2.6.0' # TODO: RUBY-714 remove guard w/ EOL of 2.5
       require 'contrast/agent/assess/policy/preshift'
 
       # Dynamic Sources

data/lib/contrast/agent/at_exit_hook.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'contrast/components/logger'

data/lib/contrast/agent/deadzone/policy/deadzone_node.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'contrast/agent/patching/policy/policy_node'
@@ -7,10 +7,9 @@ module Contrast
   module Agent
     module Deadzone
       module Policy
-        # This class functions to translate our policy.json into an actionable
-        # Ruby object, allowing for dynamic patching over hardcoded patching,
-        # specifically for those methods in which other Contrast operations
-        # should not apply
+        # This class functions to translate our policy.json into an actionable Ruby object, allowing for dynamic
+        # patching over hardcoded patching, specifically for those methods in which other Contrast operations should
+        # not apply.
         class DeadzoneNode < Contrast::Agent::Patching::Policy::PolicyNode
           def node_class
             'Deadzone'
@@ -20,12 +19,18 @@ module Contrast
             'Deadzone'
           end
 
-          # Deadzone means place the code inside of the contrast scope so that
-          # none of our code executes. As such, all DeadZone nodes have that as
-          # their method scope
+          # Deadzone means place the code inside of the contrast scope so that none of our code executes. As such, all
+          # DeadZone nodes have that as their method scope.
           def method_scope
             :contrast
           end
+
+          # TODO: RUBY-99999 remove, used to clean up logs while debugging
+          # def validate
+          #   return if class_name
+          #
+          #   raise(ArgumentError, "#{ node_class } #{ id } did not have a proper class name. Unable to create.")
+          # end
         end
       end
     end

data/lib/contrast/agent/deadzone/policy/policy.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'contrast/agent/deadzone/policy/deadzone_node'

data/lib/contrast/agent/disable_reaction.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'contrast/components/logger'

data/lib/contrast/agent/exclusion_matcher.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'contrast/components/logger'

data/lib/contrast/agent/inventory/database_config.rb

@@ -1,9 +1,10 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
-require 'contrast/utils/timer'
-require 'contrast/utils/object_share'
+require 'contrast/api/decorators/architecture_component'
 require 'contrast/components/logger'
+require 'contrast/utils/object_share'
+require 'contrast/utils/timer'
 
 module Contrast
   module Agent
@@ -13,9 +14,6 @@ module Contrast
       module DatabaseConfig
         extend Contrast::Components::Logger::InstanceMethods
 
-        # TeamServer only accepts certain values for ArchitectureComponents.
-        # DO NOT CHANGE THIS!
-        AC_TYPE_DB = 'db'
         # TeamServer only accepts certain values for FlowMap Services.
         # DO NOT CHANGE THIS
         ADAPTER = 'adapter'
@@ -25,91 +23,131 @@ module Contrast
         DEFAULT = 'default'
         LOCALHOST = 'localhost'
 
-        def self.active_record_config
-          return @_active_record_config if instance_variable_defined?(:@_active_record_config)
+        class << self
+          # Append the available database connection information to the message being sent to TeamServer. This message
+          # may be a Contrast::Api::Dtm::Activity or Contrast::Api::Dtm::ApplicationUpdate. Both report the same
+          # Contrast::Api::Dtm::ArchitectureComponent, but have different names for their fields.
+          #
+          # @param activity_or_update [Contrast::Api::Dtm::Activity, Contrast::Api::Dtm::ApplicationUpdate]
+          # @param hash_or_str [Hash, String] the database connection information
+          def append_db_config activity_or_update, hash_or_str = active_record_config
+            arr = build_from_db_config(hash_or_str)
+            return unless arr&.any?
+
+            arr.each do |a|
+              next unless a
+
+              if activity_or_update.is_a?(Contrast::Api::Dtm::Activity)
+                activity_or_update.architectures << a
+              else
+                activity_or_update.components << a
+              end
+            end
+          rescue StandardError => e
+            logger.error('Unable to append db config', e)
+            nil
+          end
 
-          @_active_record_config = ActiveRecord::Base.connection_config rescue nil # rubocop:disable Style/RescueModifier
-        end
+          private
 
-        def self.append_db_config(activity_or_update,
-                                  hash_or_str = Contrast::Agent::Inventory::DatabaseConfig.active_record_config)
-          arr = build_from_db_config(hash_or_str)
-          return unless arr&.any?
+          # We capture the active record configuration used by this application, as reported by
+          # ActiveRecord::Base.connection_config, so that we can record it once and report it as needed.
+          #
+          # @return [Hash]
+          def active_record_config
+            return @_active_record_config if instance_variable_defined?(:@_active_record_config)
 
-          arr.each do |a|
-            next unless a
+            @_active_record_config = ActiveRecord::Base.connection_config rescue nil # rubocop:disable Style/RescueModifier
+          end
 
-            if activity_or_update.is_a?(Contrast::Api::Dtm::Activity)
-              activity_or_update.architectures << a
+          # The classes we instrument in order to determine which, if any, database(s) an application connects to take
+          # either a Hash or a String as a parameter. We install this one patch into all of those methods, letting our
+          # code here, rather than at the patch level, make the determination of which path to call. We'll make that
+          # decision and then parse the given configuration to create a Contrast::Api::Dtm::ArchitectureComponent for
+          # reporting.
+          #
+          # @param hash_or_str [Hash, String]
+          # @return [Contrast::Api::Dtm::ArchitectureComponent]
+          def build_from_db_config hash_or_str
+            return unless hash_or_str
+
+            if hash_or_str.is_a?(Hash)
+              build_from_db_hash(hash_or_str)
             else
-              activity_or_update.components << a
+              build_from_db_string(hash_or_str.to_s)
             end
           end
-        rescue StandardError => e
-          logger.error('Unable to append db config', e)
-          nil
-        end
 
-        def self.build_from_db_config hash_or_str
-          return unless hash_or_str
-
-          if hash_or_str.is_a?(Hash)
-            build_from_db_hash(hash_or_str)
-          else
-            build_from_db_string(hash_or_str.to_s)
+          # Convert the Hash used to create a database connection into an Contrast::Api::Dtm::ArchitectureComponent
+          # understandable by TeamServer.
+          #
+          # @param hash [Hash] the information used to open a database connection
+          # @return [Contrast::Api::Dtm::ArchitectureComponent]
+          def build_from_db_hash hash
+            ac = Contrast::Api::Dtm::ArchitectureComponent.build_database
+            ac.vendor = hash[:adapter] || hash[ADAPTER] || Contrast::Utils::ObjectShare::EMPTY_STRING
+            ac.remote_host = host_from_hash(hash)
+            ac.remote_port = port_from_hash(hash)
+            ac.url = hash[:database] || hash[DATABASE] || DEFAULT
+            [ac]
           end
-        end
 
-        def self.build_from_db_hash hash
-          ac = Contrast::Api::Dtm::ArchitectureComponent.new
-          ac.vendor = hash[:adapter] || hash[ADAPTER] || Contrast::Utils::ObjectShare::EMPTY_STRING
-          ac.remote_host = host_from_hash(hash)
-          ac.remote_port = port_from_hash(hash)
-          ac.type = AC_TYPE_DB
-          ac.url = hash[:database] || hash[DATABASE] || DEFAULT
-          [ac]
-        end
-
-        def self.host_from_hash hash
-          hash[:host] || hash[HOST] || Contrast::Utils::ObjectShare::EMPTY_STRING
-        end
-
-        def self.port_from_hash hash
-          p = hash[:port] || hash[PORT] || Contrast::Utils::ObjectShare::EMPTY_STRING
-          p.to_i
-        end
+          # Retrieve the host from the given connection Hash
+          #
+          # @param hash [Hash]
+          # @return [String]
+          def host_from_hash hash
+            hash[:host] || hash[HOST] || Contrast::Utils::ObjectShare::EMPTY_STRING
+          end
 
-        # Examples:
-        # mongodb://[user:pass@]host1[:port1][,host2[:port2],[,hostN[:portN]]][/[database][?options]]
-        # postgresql://scott:tiger@localhost/mydatabase
-        # mysql+mysqlconnector://scott:tiger@localhost/foo
-        def self.build_from_db_string str
-          adapter, hosts, database = split_connection_str(str)
-          acs = []
-          hosts.split(Contrast::Utils::ObjectShare::COMMA).map do |s|
-            host, port = s.split(Contrast::Utils::ObjectShare::COLON)
-
-            ac = Contrast::Api::Dtm::ArchitectureComponent.new
-            ac.vendor = Contrast::Utils::StringUtils.force_utf8(adapter)
-            ac.remote_host = Contrast::Utils::StringUtils.force_utf8(host)
-            ac.remote_port = port.to_i
-            ac.type = AC_TYPE_DB
-            ac.url = Contrast::Utils::StringUtils.force_utf8(database)
-            acs << ac
+          # Retrieve the port from the given connection Hash
+          #
+          # @param hash [Hash]
+          # @return [integer]
+          def port_from_hash hash
+            p = hash[:port] || hash[PORT] || Contrast::Utils::ObjectShare::EMPTY_STRING
+            p.to_i
           end
-          acs
-        end
 
-        def self.split_connection_str str
-          adapter, str = str.split(Contrast::Utils::ObjectShare::COLON_SLASH_SLASH)
-          _auth, str = str.split(Contrast::Utils::ObjectShare::AT)
-          # Not currently used
-          # user, pass = auth.split(Contrast::Utils::ObjectShare::COLON)
-          hosts, db_and_options = str.split(Contrast::Utils::ObjectShare::SLASH)
-          hosts << LOCALHOST if hosts.empty?
-          database, _options = db_and_options.split(Contrast::Utils::ObjectShare::QUESTION_MARK)
+          # Examples:
+          # mongodb://[user:pass@]host1[:port1][,host2[:port2],[,hostN[:portN]]][/[database][?options]]
+          # postgresql://scott:tiger@localhost/mydatabase # pragma: allowlist secret
+          # mysql+mysqlconnector://scott:tiger@localhost/foo # pragma: allowlist secret
+          #
+          # @param str [String] the DB connection string
+          # @return [Contrast::Api::Dtm::ArchitectureComponent]
+          def build_from_db_string str
+            adapter, hosts, database = split_connection_str(str)
+            acs = []
+            hosts.split(Contrast::Utils::ObjectShare::COMMA).map do |s|
+              host, port = s.split(Contrast::Utils::ObjectShare::COLON)
+
+              ac = Contrast::Api::Dtm::ArchitectureComponent.build_database
+              ac.vendor = Contrast::Utils::StringUtils.force_utf8(adapter)
+              ac.remote_host = Contrast::Utils::StringUtils.force_utf8(host)
+              ac.remote_port = port.to_i
+              ac.url = Contrast::Utils::StringUtils.force_utf8(database)
+              acs << ac
+            end
+            acs
+          end
 
-          [adapter, hosts, database]
+          # Parse the given string used to connect to a database into its composite components, allowing for the
+          # generation of a Contrast::Api::Dtm::ArchitectureComponent
+          #
+          # @param str [String] the DB connection string
+          # @return [Array<String>] the adapter, hosts, and database
+          def split_connection_str str
+            adapter, str = str.split(Contrast::Utils::ObjectShare::COLON_SLASH_SLASH)
+            _auth, str = str.split(Contrast::Utils::ObjectShare::AT)
+            # Not currently used
+            # user, pass = auth.split(Contrast::Utils::ObjectShare::COLON)
+            hosts, db_and_options = str.split(Contrast::Utils::ObjectShare::SLASH)
+            hosts << LOCALHOST if hosts.empty?
+            database, _options = db_and_options.split(Contrast::Utils::ObjectShare::QUESTION_MARK)
+
+            [adapter, hosts, database]
+          end
         end
       end
     end

data/lib/contrast/agent/inventory/dependencies.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 module Contrast

data/lib/contrast/agent/inventory/dependency_analysis.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'contrast/agent/inventory/dependencies'

data/lib/contrast/agent/inventory/dependency_usage_analysis.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'contrast/agent/inventory/dependencies'
@@ -72,6 +72,7 @@ module Contrast
         # Populate the library_usages field of the Activity message using the data stored in the @gemdigest_cache.
         #
         # TODO: RUBY-1355
+        # TODO: RUBY-1438 -- change to just use EventMessage
         # @param activity [Contrast::Api::Dtm::Activity] the message to which to append the usage data
         def generate_library_usage activity
           return unless enabled?
@@ -84,7 +85,6 @@ module Contrast
             @gemdigest_cache = Hash.new { |hash, key| hash[key] = Set.new }
             hold
           end
-
           gem_spec_digest_to_files.each_pair do |digest, files|
             usage = Contrast::Api::Dtm::LibraryUsageUpdate.build(digest, files)
             activity.library_usages[usage.hash_code] = usage
@@ -97,7 +97,7 @@ module Contrast
 
         def adjust_path_for_spec_lookup path
           idx = path.index('/lib/')
-          path = path[(idx + 4)..-1] if idx
+          path = path[(idx + 4)..] if idx
           path
         end
 

data/lib/contrast/agent/inventory/policy/datastores.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'contrast/components/logger'

data/lib/contrast/agent/inventory/policy/policy.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'contrast/agent/inventory/policy/trigger_node'

data/lib/contrast/agent/inventory/policy/trigger_node.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'contrast/agent/patching/policy/trigger_node'

data/lib/contrast/agent/inventory.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 module Contrast

data/lib/contrast/agent/metric_telemetry_event.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2021 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
 require 'contrast/utils/metrics_hash'