contrast-agent 4.14.1 → 5.0.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.simplecov +1 -1
- data/Gemfile +1 -1
- data/LICENSE.txt +1 -1
- data/Rakefile +1 -1
- data/exe/contrast_service +1 -1
- data/ext/build_funchook.rb +1 -1
- data/ext/cs__assess_array/cs__assess_array.c +1 -1
- data/ext/cs__assess_array/extconf.rb +1 -1
- data/ext/cs__assess_basic_object/cs__assess_basic_object.c +1 -1
- data/ext/cs__assess_basic_object/extconf.rb +1 -1
- data/ext/cs__assess_fiber_track/cs__assess_fiber_track.c +1 -1
- data/ext/cs__assess_fiber_track/extconf.rb +1 -1
- data/ext/cs__assess_hash/cs__assess_hash.c +1 -1
- data/ext/cs__assess_hash/extconf.rb +1 -1
- data/ext/cs__assess_kernel/cs__assess_kernel.c +1 -1
- data/ext/cs__assess_kernel/extconf.rb +1 -1
- data/ext/cs__assess_marshal_module/cs__assess_marshal_module.c +1 -1
- data/ext/cs__assess_marshal_module/extconf.rb +1 -1
- data/ext/cs__assess_module/cs__assess_module.c +1 -1
- data/ext/cs__assess_module/extconf.rb +1 -1
- data/ext/cs__assess_regexp/cs__assess_regexp.c +1 -1
- data/ext/cs__assess_regexp/extconf.rb +1 -1
- data/ext/cs__assess_string/cs__assess_string.c +1 -1
- data/ext/cs__assess_string/extconf.rb +1 -1
- data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.c +1 -1
- data/ext/cs__assess_string_interpolation26/extconf.rb +1 -1
- data/ext/cs__assess_yield_track/cs__assess_yield_track.c +1 -1
- data/ext/cs__assess_yield_track/extconf.rb +1 -1
- data/ext/cs__common/cs__common.c +1 -1
- data/ext/cs__common/extconf.rb +1 -1
- data/ext/cs__contrast_patch/cs__contrast_patch.c +1 -1
- data/ext/cs__contrast_patch/extconf.rb +1 -1
- data/ext/cs__os_information/cs__os_information.c +1 -1
- data/ext/cs__os_information/extconf.rb +1 -1
- data/ext/extconf_common.rb +1 -1
- data/lib/contrast/agent/assess/contrast_event.rb +7 -11
- data/lib/contrast/agent/assess/contrast_object.rb +1 -1
- data/lib/contrast/agent/assess/events/event_data.rb +30 -0
- data/lib/contrast/agent/assess/events/event_factory.rb +14 -6
- data/lib/contrast/agent/assess/events/source_event.rb +22 -3
- data/lib/contrast/agent/assess/finalizers/freeze.rb +1 -1
- data/lib/contrast/agent/assess/finalizers/hash.rb +1 -1
- data/lib/contrast/agent/assess/policy/dynamic_source_factory.rb +7 -7
- data/lib/contrast/agent/assess/policy/patcher.rb +1 -35
- data/lib/contrast/agent/assess/policy/policy.rb +1 -1
- data/lib/contrast/agent/assess/policy/policy_node.rb +2 -2
- data/lib/contrast/agent/assess/policy/policy_scanner.rb +1 -1
- data/lib/contrast/agent/assess/policy/preshift.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagation_method.rb +55 -28
- data/lib/contrast/agent/assess/policy/propagation_node.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/append.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/base.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/center.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/custom.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/database_write.rb +6 -2
- data/lib/contrast/agent/assess/policy/propagator/insert.rb +5 -2
- data/lib/contrast/agent/assess/policy/propagator/keep.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/match_data.rb +7 -3
- data/lib/contrast/agent/assess/policy/propagator/next.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/prepend.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/rack_protection.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/remove.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/replace.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/reverse.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/select.rb +3 -2
- data/lib/contrast/agent/assess/policy/propagator/splat.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/split.rb +27 -25
- data/lib/contrast/agent/assess/policy/propagator/substitution.rb +3 -5
- data/lib/contrast/agent/assess/policy/propagator/substitution_utils.rb +190 -0
- data/lib/contrast/agent/assess/policy/propagator/trim.rb +9 -4
- data/lib/contrast/agent/assess/policy/propagator.rb +1 -1
- data/lib/contrast/agent/assess/policy/source_method.rb +39 -26
- data/lib/contrast/agent/assess/policy/source_node.rb +1 -1
- data/lib/contrast/agent/assess/policy/source_validation/cross_site_validator.rb +1 -1
- data/lib/contrast/agent/assess/policy/source_validation/source_validation.rb +1 -1
- data/lib/contrast/agent/assess/policy/trigger/reflected_xss.rb +7 -2
- data/lib/contrast/agent/assess/policy/trigger/xpath.rb +1 -1
- data/lib/contrast/agent/assess/policy/trigger_method.rb +37 -24
- data/lib/contrast/agent/assess/policy/trigger_node.rb +1 -1
- data/lib/contrast/agent/assess/policy/trigger_validation/redos_validator.rb +1 -1
- data/lib/contrast/agent/assess/policy/trigger_validation/ssrf_validator.rb +1 -1
- data/lib/contrast/agent/assess/policy/trigger_validation/trigger_validation.rb +1 -1
- data/lib/contrast/agent/assess/policy/trigger_validation/xss_validator.rb +1 -1
- data/lib/contrast/agent/assess/properties.rb +1 -1
- data/lib/contrast/agent/assess/property/evented.rb +25 -12
- data/lib/contrast/agent/assess/property/tagged.rb +1 -1
- data/lib/contrast/agent/assess/property/updated.rb +1 -1
- data/lib/contrast/agent/assess/rule/provider/hardcoded_key.rb +1 -19
- data/lib/contrast/agent/assess/rule/provider/hardcoded_password.rb +1 -13
- data/lib/contrast/agent/assess/rule/provider/hardcoded_value_rule.rb +7 -59
- data/lib/contrast/agent/assess/rule/provider.rb +1 -1
- data/lib/contrast/agent/assess/rule/response/autocomplete_rule.rb +130 -0
- data/lib/contrast/agent/assess/rule/response/base_rule.rb +117 -0
- data/lib/contrast/agent/assess/tag.rb +1 -1
- data/lib/contrast/agent/assess/tracker.rb +1 -1
- data/lib/contrast/agent/assess.rb +1 -2
- data/lib/contrast/agent/at_exit_hook.rb +1 -1
- data/lib/contrast/agent/deadzone/policy/deadzone_node.rb +13 -8
- data/lib/contrast/agent/deadzone/policy/policy.rb +1 -1
- data/lib/contrast/agent/disable_reaction.rb +1 -1
- data/lib/contrast/agent/exclusion_matcher.rb +1 -1
- data/lib/contrast/agent/inventory/database_config.rb +115 -77
- data/lib/contrast/agent/inventory/dependencies.rb +1 -1
- data/lib/contrast/agent/inventory/dependency_analysis.rb +1 -1
- data/lib/contrast/agent/inventory/dependency_usage_analysis.rb +3 -3
- data/lib/contrast/agent/inventory/policy/datastores.rb +1 -1
- data/lib/contrast/agent/inventory/policy/policy.rb +1 -1
- data/lib/contrast/agent/inventory/policy/trigger_node.rb +1 -1
- data/lib/contrast/agent/inventory.rb +1 -1
- data/lib/contrast/agent/metric_telemetry_event.rb +1 -1
- data/lib/contrast/agent/middleware.rb +3 -2
- data/lib/contrast/agent/module_data.rb +1 -1
- data/lib/contrast/agent/patching/policy/after_load_patch.rb +1 -1
- data/lib/contrast/agent/patching/policy/after_load_patcher.rb +1 -1
- data/lib/contrast/agent/patching/policy/method_policy.rb +28 -15
- data/lib/contrast/agent/patching/policy/method_policy_extend.rb +12 -10
- data/lib/contrast/agent/patching/policy/module_policy.rb +1 -1
- data/lib/contrast/agent/patching/policy/patch.rb +1 -1
- data/lib/contrast/agent/patching/policy/patch_status.rb +2 -26
- data/lib/contrast/agent/patching/policy/patcher.rb +1 -5
- data/lib/contrast/agent/patching/policy/policy.rb +1 -1
- data/lib/contrast/agent/patching/policy/policy_node.rb +1 -1
- data/lib/contrast/agent/patching/policy/trigger_node.rb +1 -1
- data/lib/contrast/agent/protect/policy/applies_command_injection_rule.rb +1 -1
- data/lib/contrast/agent/protect/policy/applies_deserialization_rule.rb +1 -1
- data/lib/contrast/agent/protect/policy/applies_no_sqli_rule.rb +1 -1
- data/lib/contrast/agent/protect/policy/applies_path_traversal_rule.rb +1 -1
- data/lib/contrast/agent/protect/policy/applies_sqli_rule.rb +1 -1
- data/lib/contrast/agent/protect/policy/applies_xxe_rule.rb +1 -1
- data/lib/contrast/agent/protect/policy/policy.rb +1 -1
- data/lib/contrast/agent/protect/policy/rule_applicator.rb +1 -1
- data/lib/contrast/agent/protect/policy/trigger_node.rb +1 -1
- data/lib/contrast/agent/protect/rule/base.rb +1 -1
- data/lib/contrast/agent/protect/rule/base_service.rb +1 -1
- data/lib/contrast/agent/protect/rule/cmd_injection.rb +1 -1
- data/lib/contrast/agent/protect/rule/default_scanner.rb +1 -1
- data/lib/contrast/agent/protect/rule/deserialization.rb +1 -1
- data/lib/contrast/agent/protect/rule/http_method_tampering.rb +1 -1
- data/lib/contrast/agent/protect/rule/no_sqli/mongo_no_sql_scanner.rb +1 -1
- data/lib/contrast/agent/protect/rule/no_sqli.rb +1 -1
- data/lib/contrast/agent/protect/rule/path_traversal.rb +1 -1
- data/lib/contrast/agent/protect/rule/sql_sample_builder.rb +1 -1
- data/lib/contrast/agent/protect/rule/sqli/default_sql_scanner.rb +1 -1
- data/lib/contrast/agent/protect/rule/sqli/mysql_sql_scanner.rb +1 -1
- data/lib/contrast/agent/protect/rule/sqli/postgres_sql_scanner.rb +2 -2
- data/lib/contrast/agent/protect/rule/sqli/sqlite_sql_scanner.rb +1 -1
- data/lib/contrast/agent/protect/rule/sqli.rb +1 -1
- data/lib/contrast/agent/protect/rule/unsafe_file_upload.rb +1 -1
- data/lib/contrast/agent/protect/rule/xss.rb +1 -1
- data/lib/contrast/agent/protect/rule/xxe/entity_wrapper.rb +1 -1
- data/lib/contrast/agent/protect/rule/xxe.rb +1 -1
- data/lib/contrast/agent/protect/rule.rb +1 -1
- data/lib/contrast/agent/reaction_processor.rb +1 -1
- data/lib/contrast/agent/reporting/report.rb +7 -1
- data/lib/contrast/agent/reporting/reporter.rb +21 -48
- data/lib/contrast/agent/reporting/reporting_events/application_inventory.rb +49 -0
- data/lib/contrast/agent/reporting/reporting_events/application_update.rb +82 -0
- data/lib/contrast/agent/reporting/reporting_events/architecture_component.rb +80 -0
- data/lib/contrast/agent/reporting/reporting_events/discovered_route.rb +59 -0
- data/lib/contrast/agent/reporting/reporting_events/finding.rb +138 -43
- data/lib/contrast/agent/reporting/reporting_events/finding_event.rb +264 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_source.rb +57 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_object.rb +90 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_request.rb +121 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_signature.rb +105 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_stack.rb +67 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_taint_range.rb +58 -0
- data/lib/contrast/agent/reporting/reporting_events/library_discovery.rb +93 -0
- data/lib/contrast/agent/reporting/reporting_events/library_usage_observation.rb +50 -0
- data/lib/contrast/agent/reporting/reporting_events/observed_library_usage.rb +54 -0
- data/lib/contrast/agent/reporting/reporting_events/observed_route.rb +66 -0
- data/lib/contrast/agent/reporting/reporting_events/preflight.rb +20 -6
- data/lib/contrast/agent/reporting/reporting_events/preflight_message.rb +36 -17
- data/lib/contrast/agent/reporting/reporting_events/reporting_event.rb +28 -18
- data/lib/contrast/agent/reporting/reporting_events/route_coverage.rb +76 -0
- data/lib/contrast/agent/reporting/reporting_events/route_discovery.rb +66 -0
- data/lib/contrast/agent/reporting/reporting_events/route_discovery_observation.rb +65 -0
- data/lib/contrast/agent/reporting/reporting_events/server_activity.rb +52 -0
- data/lib/contrast/agent/reporting/reporting_events/trace_event_source.rb +30 -0
- data/lib/contrast/agent/reporting/reporting_utilities/audit.rb +22 -12
- data/lib/contrast/agent/reporting/reporting_utilities/dtm_message.rb +67 -0
- data/lib/contrast/agent/reporting/reporting_utilities/endpoints.rb +165 -0
- data/lib/contrast/agent/reporting/reporting_utilities/headers.rb +55 -0
- data/lib/contrast/agent/reporting/reporting_utilities/reporter_client.rb +74 -156
- data/lib/contrast/agent/reporting/reporting_utilities/reporter_client_utils.rb +154 -0
- data/lib/contrast/agent/reporting/reporting_utilities/reporting_storage.rb +1 -1
- data/lib/contrast/agent/reporting/reporting_utilities/response.rb +30 -0
- data/lib/contrast/agent/reporting/reporting_utilities/response_handler.rb +57 -0
- data/lib/contrast/agent/reporting/reporting_utilities/response_handler_utils.rb +196 -0
- data/lib/contrast/agent/reporting/settings/application_settings.rb +67 -0
- data/lib/contrast/agent/reporting/settings/assess.rb +45 -0
- data/lib/contrast/agent/reporting/settings/assess_server_feature.rb +136 -0
- data/lib/contrast/agent/reporting/settings/exclusions.rb +123 -0
- data/lib/contrast/agent/reporting/settings/protect.rb +89 -0
- data/lib/contrast/agent/reporting/settings/protect_server_feature.rb +243 -0
- data/lib/contrast/agent/reporting/settings/reaction.rb +30 -0
- data/lib/contrast/agent/reporting/settings/server_features.rb +78 -0
- data/lib/contrast/agent/request.rb +44 -3
- data/lib/contrast/agent/request_context.rb +20 -7
- data/lib/contrast/agent/request_context_extend.rb +26 -1
- data/lib/contrast/agent/request_handler.rb +41 -5
- data/lib/contrast/agent/response.rb +23 -15
- data/lib/contrast/agent/rule_set.rb +1 -1
- data/lib/contrast/agent/scope.rb +1 -1
- data/lib/contrast/agent/service_heartbeat.rb +1 -1
- data/lib/contrast/agent/startup_metrics_telemetry_event.rb +34 -7
- data/lib/contrast/agent/static_analysis.rb +13 -3
- data/lib/contrast/agent/telemetry.rb +1 -1
- data/lib/contrast/agent/telemetry_event.rb +1 -1
- data/lib/contrast/agent/thread.rb +1 -1
- data/lib/contrast/agent/thread_watcher.rb +3 -3
- data/lib/contrast/agent/tracepoint_hook.rb +1 -4
- data/lib/contrast/agent/version.rb +2 -2
- data/lib/contrast/agent/worker_thread.rb +1 -1
- data/lib/contrast/agent.rb +4 -4
- data/lib/contrast/api/communication/connection_status.rb +1 -1
- data/lib/contrast/api/communication/messaging_queue.rb +4 -4
- data/lib/contrast/api/communication/response_processor.rb +9 -5
- data/lib/contrast/api/communication/service_lifecycle.rb +1 -1
- data/lib/contrast/api/communication/socket.rb +1 -1
- data/lib/contrast/api/communication/socket_client.rb +4 -1
- data/lib/contrast/api/communication/speedracer.rb +1 -1
- data/lib/contrast/api/communication/tcp_socket.rb +1 -1
- data/lib/contrast/api/communication/unix_socket.rb +1 -1
- data/lib/contrast/api/communication.rb +1 -1
- data/lib/contrast/api/decorators/address.rb +1 -1
- data/lib/contrast/api/decorators/agent_startup.rb +1 -1
- data/lib/contrast/api/decorators/application_settings.rb +1 -1
- data/lib/contrast/api/decorators/application_startup.rb +1 -1
- data/lib/contrast/api/decorators/application_update.rb +1 -1
- data/lib/contrast/api/decorators/architecture_component.rb +36 -0
- data/lib/contrast/api/decorators/finding.rb +1 -17
- data/lib/contrast/api/decorators/http_request.rb +3 -2
- data/lib/contrast/api/decorators/input_analysis.rb +1 -1
- data/lib/contrast/api/decorators/instrumentation_mode.rb +1 -1
- data/lib/contrast/api/decorators/library.rb +1 -1
- data/lib/contrast/api/decorators/library_usage_update.rb +1 -1
- data/lib/contrast/api/decorators/message.rb +1 -1
- data/lib/contrast/api/decorators/rasp_rule_sample.rb +1 -1
- data/lib/contrast/api/decorators/route_coverage.rb +1 -1
- data/lib/contrast/api/decorators/server_features.rb +1 -1
- data/lib/contrast/api/decorators/trace_event.rb +1 -1
- data/lib/contrast/api/decorators/trace_event_object.rb +1 -1
- data/lib/contrast/api/decorators/trace_event_signature.rb +1 -1
- data/lib/contrast/api/decorators/trace_taint_range.rb +1 -1
- data/lib/contrast/api/decorators/trace_taint_range_tags.rb +1 -1
- data/lib/contrast/api/decorators/user_input.rb +1 -1
- data/lib/contrast/api/decorators.rb +2 -1
- data/lib/contrast/api.rb +1 -1
- data/lib/contrast/components/agent.rb +5 -24
- data/lib/contrast/components/api.rb +18 -9
- data/lib/contrast/components/app_context.rb +2 -1
- data/lib/contrast/components/app_context_extend.rb +1 -1
- data/lib/contrast/components/assess.rb +12 -8
- data/lib/contrast/components/base.rb +1 -1
- data/lib/contrast/components/config.rb +30 -15
- data/lib/contrast/components/contrast_service.rb +1 -1
- data/lib/contrast/components/heap_dump.rb +1 -1
- data/lib/contrast/components/inventory.rb +5 -1
- data/lib/contrast/components/logger.rb +1 -1
- data/lib/contrast/components/protect.rb +6 -2
- data/lib/contrast/components/sampling.rb +1 -1
- data/lib/contrast/components/scope.rb +1 -1
- data/lib/contrast/components/settings.rb +25 -12
- data/lib/contrast/config/agent_configuration.rb +1 -1
- data/lib/contrast/config/api_configuration.rb +2 -2
- data/lib/contrast/config/api_proxy_configuration.rb +1 -1
- data/lib/contrast/config/application_configuration.rb +1 -1
- data/lib/contrast/config/assess_configuration.rb +1 -1
- data/lib/contrast/config/assess_rules_configuration.rb +1 -1
- data/lib/contrast/config/base_configuration.rb +1 -1
- data/lib/contrast/config/certification_configuration.rb +1 -1
- data/lib/contrast/config/env_variables.rb +1 -1
- data/lib/contrast/config/exception_configuration.rb +1 -1
- data/lib/contrast/config/heap_dump_configuration.rb +1 -1
- data/lib/contrast/config/inventory_configuration.rb +1 -1
- data/lib/contrast/config/logger_configuration.rb +1 -1
- data/lib/contrast/config/protect_configuration.rb +1 -1
- data/lib/contrast/config/protect_rule_configuration.rb +1 -1
- data/lib/contrast/config/protect_rules_configuration.rb +1 -1
- data/lib/contrast/config/request_audit_configuration.rb +1 -1
- data/lib/contrast/config/root_configuration.rb +1 -1
- data/lib/contrast/config/ruby_configuration.rb +4 -1
- data/lib/contrast/config/sampling_configuration.rb +1 -1
- data/lib/contrast/config/server_configuration.rb +1 -1
- data/lib/contrast/config/service_configuration.rb +1 -1
- data/lib/contrast/config.rb +1 -1
- data/lib/contrast/configuration.rb +1 -1
- data/lib/contrast/extension/assess/array.rb +4 -2
- data/lib/contrast/extension/assess/erb.rb +15 -5
- data/lib/contrast/extension/assess/eval_trigger.rb +3 -1
- data/lib/contrast/extension/assess/exec_trigger.rb +2 -1
- data/lib/contrast/extension/assess/fiber.rb +6 -3
- data/lib/contrast/extension/assess/hash.rb +1 -1
- data/lib/contrast/extension/assess/kernel.rb +8 -3
- data/lib/contrast/extension/assess/marshal.rb +6 -2
- data/lib/contrast/extension/assess/regexp.rb +8 -2
- data/lib/contrast/extension/assess/string.rb +8 -2
- data/lib/contrast/extension/assess.rb +1 -1
- data/lib/contrast/extension/delegator.rb +1 -1
- data/lib/contrast/extension/extension.rb +2 -4
- data/lib/contrast/extension/inventory.rb +1 -1
- data/lib/contrast/extension/kernel.rb +1 -1
- data/lib/contrast/extension/module.rb +1 -1
- data/lib/contrast/extension/protect/psych.rb +1 -1
- data/lib/contrast/extension/protect.rb +1 -1
- data/lib/contrast/extension/thread.rb +1 -1
- data/lib/contrast/framework/base_support.rb +5 -1
- data/lib/contrast/framework/grape/support.rb +25 -1
- data/lib/contrast/framework/manager.rb +26 -5
- data/lib/contrast/framework/manager_extend.rb +1 -1
- data/lib/contrast/framework/platform_version.rb +1 -1
- data/lib/contrast/framework/rack/patch/session_cookie.rb +1 -1
- data/lib/contrast/framework/rack/patch/support.rb +1 -1
- data/lib/contrast/framework/rack/support.rb +1 -1
- data/lib/contrast/framework/rails/patch/action_controller_live_buffer.rb +1 -1
- data/lib/contrast/framework/rails/patch/assess_configuration.rb +1 -1
- data/lib/contrast/framework/rails/patch/rails_application_configuration.rb +1 -1
- data/lib/contrast/framework/rails/patch/support.rb +1 -1
- data/lib/contrast/framework/rails/railtie.rb +1 -1
- data/lib/contrast/framework/rails/support.rb +46 -2
- data/lib/contrast/framework/sinatra/support.rb +24 -2
- data/lib/contrast/funchook/funchook.rb +21 -18
- data/lib/contrast/logger/application.rb +1 -1
- data/lib/contrast/logger/format.rb +1 -1
- data/lib/contrast/logger/log.rb +1 -1
- data/lib/contrast/logger/request.rb +1 -1
- data/lib/contrast/logger/time.rb +1 -1
- data/lib/contrast/security_exception.rb +1 -1
- data/lib/contrast/tasks/config.rb +1 -1
- data/lib/contrast/tasks/service.rb +1 -1
- data/lib/contrast/utils/assess/propagation_method_utils.rb +1 -1
- data/lib/contrast/utils/assess/property/tagged_utils.rb +1 -1
- data/lib/contrast/utils/assess/sampling_util.rb +4 -4
- data/lib/contrast/utils/assess/source_method_utils.rb +1 -1
- data/lib/contrast/utils/assess/split_utils.rb +23 -0
- data/lib/contrast/utils/assess/tracking_util.rb +1 -1
- data/lib/contrast/utils/assess/trigger_method_utils.rb +3 -2
- data/lib/contrast/utils/class_util.rb +1 -1
- data/lib/contrast/utils/duck_utils.rb +1 -1
- data/lib/contrast/utils/env_configuration_item.rb +2 -2
- data/lib/contrast/utils/exclude_key.rb +1 -1
- data/lib/contrast/utils/findings.rb +5 -2
- data/lib/contrast/utils/hash_digest.rb +36 -6
- data/lib/contrast/utils/hash_digest_extend.rb +44 -1
- data/lib/contrast/utils/head_dump_utils_extend.rb +1 -1
- data/lib/contrast/utils/heap_dump_util.rb +1 -1
- data/lib/contrast/utils/invalid_configuration_util.rb +6 -5
- data/lib/contrast/utils/io_util.rb +1 -1
- data/lib/contrast/utils/job_servers_running.rb +1 -1
- data/lib/contrast/utils/log_utils.rb +1 -1
- data/lib/contrast/utils/lru_cache.rb +1 -1
- data/lib/contrast/utils/metrics_hash.rb +2 -2
- data/lib/contrast/utils/middleware_utils.rb +1 -1
- data/lib/contrast/utils/net_http_base.rb +14 -7
- data/lib/contrast/utils/object_share.rb +1 -6
- data/lib/contrast/utils/os.rb +9 -5
- data/lib/contrast/utils/patching/policy/patch_utils.rb +63 -99
- data/lib/contrast/utils/patching/policy/patcher_utils.rb +1 -1
- data/lib/contrast/utils/preflight_util.rb +1 -1
- data/lib/contrast/utils/request_utils.rb +9 -1
- data/lib/contrast/utils/resource_loader.rb +1 -1
- data/lib/contrast/utils/response_utils.rb +1 -1
- data/lib/contrast/utils/sha256_builder.rb +1 -1
- data/lib/contrast/utils/stack_trace_utils.rb +1 -1
- data/lib/contrast/utils/string_utils.rb +69 -67
- data/lib/contrast/utils/tag_util.rb +2 -1
- data/lib/contrast/utils/telemetry.rb +1 -1
- data/lib/contrast/utils/telemetry_client.rb +1 -1
- data/lib/contrast/utils/telemetry_identifier.rb +1 -1
- data/lib/contrast/utils/thread_tracker.rb +1 -1
- data/lib/contrast/utils/timer.rb +1 -1
- data/lib/contrast-agent.rb +1 -1
- data/lib/contrast.rb +1 -1
- data/ruby-agent.gemspec +4 -5
- metadata +58 -30
- data/ext/cs__assess_active_record_named/cs__active_record_named.c +0 -46
- data/ext/cs__assess_active_record_named/cs__active_record_named.h +0 -11
- data/ext/cs__assess_active_record_named/extconf.rb +0 -5
- data/lib/contrast/agent/assess/policy/rewriter_patch.rb +0 -95
- data/lib/contrast/agent/class_reopener.rb +0 -258
- data/lib/contrast/agent/rewriter.rb +0 -259
- data/lib/contrast/framework/rails/rewrite/action_controller_railties_helper_inherited.rb +0 -37
- data/lib/contrast/framework/rails/rewrite/active_record_attribute_methods_read.rb +0 -41
- data/lib/contrast/framework/rails/rewrite/active_record_named.rb +0 -75
- data/lib/contrast/framework/rails/rewrite/active_record_time_zone_inherited.rb +0 -35
- data/lib/contrast/utils/ruby_ast_rewriter.rb +0 -82
- data/lib/contrast/utils/substitution_utils.rb +0 -167
@@ -1,6 +1,8 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
|
+
require 'contrast/agent/assess/rule/response/autocomplete_rule'
|
5
|
+
|
4
6
|
module Contrast
|
5
7
|
module Agent
|
6
8
|
# This class extends RequestContexts: this class acts to encapsulate information about the currently
|
@@ -30,6 +32,18 @@ module Contrast
|
|
30
32
|
@request.observed_route = @observed_route
|
31
33
|
end
|
32
34
|
|
35
|
+
# Convert the discovered route for this request to appropriate forms and disseminate it to those locations
|
36
|
+
# where it is necessary for our route coverage and finding vulnerability discovery features to function.
|
37
|
+
#
|
38
|
+
def append_to_new_observed_route route
|
39
|
+
return unless route
|
40
|
+
|
41
|
+
@new_observed_route.signature = route.route
|
42
|
+
@new_observed_route.verb = route.verb
|
43
|
+
@new_observed_route.url = route.url if route.url
|
44
|
+
@request.new_observed_route = @new_observed_route
|
45
|
+
end
|
46
|
+
|
33
47
|
# Collect the results for the given rule with the given action
|
34
48
|
#
|
35
49
|
# @param rule [String] the id of the rule to which the results apply
|
@@ -96,6 +110,9 @@ module Contrast
|
|
96
110
|
def extract_after rack_response
|
97
111
|
@response = Contrast::Agent::Response.new(rack_response)
|
98
112
|
activity.http_response = @response.dtm if @sample_res
|
113
|
+
return unless Contrast::Agent::Reporter.enabled?
|
114
|
+
|
115
|
+
Contrast::Agent::Assess::Rule::Response::Autocomplete.new.analyze(@response)
|
99
116
|
rescue StandardError => e
|
100
117
|
logger.error('Unable to extract information after request', e)
|
101
118
|
end
|
@@ -124,6 +141,14 @@ module Contrast
|
|
124
141
|
end
|
125
142
|
end
|
126
143
|
|
144
|
+
# Generates the attack result
|
145
|
+
#
|
146
|
+
# @param rule [Contrast::Agent::Protect::Rule, Contrast::Agent::Assess::Rule]
|
147
|
+
# @param rule_id [String] String name of the rule
|
148
|
+
# @param ia_result [Contrast::Api::Settings::InputAnalysisResult] the
|
149
|
+
# analysis of the input that was determined to be an attack
|
150
|
+
# @param results_by_rule [Hash] attack results from any evaluations on the agent settings object.
|
151
|
+
# @return [Contrast::Api::Dtm::AttackResult] the attack result from this input
|
127
152
|
def attack_result rule, rule_id, ia_result, results_by_rule
|
128
153
|
@_attack_result = if rule.mode == :BLOCK
|
129
154
|
# special case for rules (like reflected xss) that used to have an infilter / block mode
|
@@ -1,8 +1,10 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/components/logger'
|
5
5
|
require 'contrast/components/scope'
|
6
|
+
require 'contrast/agent/reporting/reporter'
|
7
|
+
require 'contrast/agent/reporting/reporting_utilities/dtm_message'
|
6
8
|
|
7
9
|
module Contrast
|
8
10
|
module Agent
|
@@ -19,15 +21,49 @@ module Contrast
|
|
19
21
|
@ruleset = ::Contrast::AGENT.ruleset
|
20
22
|
end
|
21
23
|
|
22
|
-
#
|
24
|
+
# Send Activities messages to TS [Contrast::Agent::Reporting::ServerActivity,
|
25
|
+
# Contrast::Api::Dtm::ServerActivity,
|
26
|
+
# Contrast::Api::Dtm::Activity,
|
27
|
+
# Contrast::Api::Dtm::ObservedRoute]
|
28
|
+
# If bypass is enabled use the reporting service if not than the messages are
|
29
|
+
# send with speedracer
|
23
30
|
# TODO: RUBY-1355
|
24
|
-
# TODO: RUBY-1357
|
25
31
|
# TODO: RUBY-1358
|
32
|
+
# TODO: RUBY-1438 -- remove
|
26
33
|
def send_activity_messages
|
34
|
+
events = [context.activity]
|
35
|
+
unless Contrast::Agent::Reporter.enabled?
|
36
|
+
Contrast::Agent::Inventory::DependencyUsageAnalysis.instance.generate_library_usage(context.activity)
|
37
|
+
events << context.server_activity
|
38
|
+
events << context.observed_route
|
39
|
+
end
|
40
|
+
events.each do |message|
|
41
|
+
Contrast::Agent.messaging_queue&.send_event_eventually(message)
|
42
|
+
end
|
43
|
+
end
|
44
|
+
|
45
|
+
# reports events[Contrast::Agent::Reporting::ReporterEvent] to TS
|
46
|
+
# This method is used to send our JSON messages directly to TeamServer at the end of each request. As we move
|
47
|
+
# more endpoints over, this method will take the messages originally sent by #send_actiivty_messages. At the end,
|
48
|
+
# that method should be removed.
|
49
|
+
# TODO: RUBY-1358
|
50
|
+
def report_activity
|
51
|
+
return unless Contrast::Agent::Reporter.enabled?
|
52
|
+
|
53
|
+
reporter = Contrast::Agent.reporter
|
54
|
+
return unless reporter
|
55
|
+
|
27
56
|
Contrast::Agent::Inventory::DependencyUsageAnalysis.instance.generate_library_usage(context.activity)
|
28
|
-
[
|
29
|
-
|
57
|
+
[
|
58
|
+
context.new_observed_route,
|
59
|
+
Contrast::Agent::Reporting::DtmMessage.dtm_to_event(context.server_activity),
|
60
|
+
Contrast::Agent::Reporting::DtmMessage.dtm_to_event(context.activity.library_usages)
|
61
|
+
].each do |event|
|
62
|
+
reporter.send_event(event)
|
63
|
+
rescue StandardError => e
|
64
|
+
logger.warn('Unable to send Event Activity', e)
|
30
65
|
end
|
66
|
+
context.activity.library_usages.clear # TODO: RUBY-1355 remove when no longer using activity
|
31
67
|
end
|
32
68
|
|
33
69
|
# If the response is streaming, we should only perform filtering on our stream safe rules
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'resolv'
|
@@ -29,6 +29,9 @@ module Contrast
|
|
29
29
|
@is_array = !rack_response.is_a?(Rack::Response)
|
30
30
|
end
|
31
31
|
|
32
|
+
# The document type of the response, based on its Content-Type. Can be one of :JSON, :NORMAL, :XML, or nothing.
|
33
|
+
#
|
34
|
+
# @return [Symbol<:XML, :JSON, :NORMAL>, nil]
|
32
35
|
def document_type
|
33
36
|
case content_type
|
34
37
|
when /xml/i
|
@@ -40,7 +43,10 @@ module Contrast
|
|
40
43
|
end
|
41
44
|
end
|
42
45
|
|
43
|
-
#
|
46
|
+
# A form of the Rack::Response which we can report to the Service to be sent to TeamServer for processing. B/c
|
47
|
+
# the response can change, we can't memoize this :(
|
48
|
+
#
|
49
|
+
# @return [Contrast::Api::Dtm::HttpResponse]
|
44
50
|
def dtm
|
45
51
|
context_response = Contrast::Api::Dtm::HttpResponse.new
|
46
52
|
context_response.response_code = response_code.to_i
|
@@ -55,35 +61,37 @@ module Contrast
|
|
55
61
|
context_response
|
56
62
|
end
|
57
63
|
|
64
|
+
# The response code of this response
|
65
|
+
#
|
66
|
+
# @return [Integer]
|
58
67
|
def response_code
|
59
68
|
return unless rack_response
|
60
69
|
|
61
70
|
@is_array ? rack_response[0].to_i : rack_response.status
|
62
71
|
end
|
63
72
|
|
73
|
+
# The headers of this response
|
74
|
+
#
|
75
|
+
# @return [Hash, nil]
|
64
76
|
def headers
|
65
77
|
return unless rack_response
|
66
78
|
|
67
|
-
|
68
|
-
rack_response[1]
|
69
|
-
else
|
70
|
-
rack_response.headers
|
71
|
-
end
|
79
|
+
@is_array ? rack_response[1] : rack_response.headers
|
72
80
|
end
|
73
81
|
|
82
|
+
# The Content-Type of this response, as set in the headers hash under the key Rack::CONTENT_TYPE
|
83
|
+
#
|
84
|
+
# @return [String, nil]
|
74
85
|
def content_type
|
75
86
|
return unless rack_response
|
76
87
|
|
77
|
-
|
78
|
-
headers[Rack::CONTENT_TYPE]
|
79
|
-
else
|
80
|
-
rack_response.content_type
|
81
|
-
end
|
88
|
+
@is_array ? headers[Rack::CONTENT_TYPE] : rack_response.content_type
|
82
89
|
end
|
83
90
|
|
84
|
-
# The response body can change during the request lifecycle
|
85
|
-
# We should not extract it out as a variable here, or we'll miss those
|
86
|
-
#
|
91
|
+
# The response body can change during the request lifecycle, so we have to look it up every time we need it.
|
92
|
+
# We should not extract it out as a variable here, or we'll miss those changes.
|
93
|
+
#
|
94
|
+
# @return [String, nil]
|
87
95
|
def body
|
88
96
|
return unless rack_response
|
89
97
|
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/components/logger'
|
data/lib/contrast/agent/scope.rb
CHANGED
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
module Contrast
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/components/logger'
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/utils/metrics_hash'
|
@@ -44,9 +44,14 @@ module Contrast
|
|
44
44
|
FALLBACK_TENANTS = [SAAS_CUSTOM, SAAS_CUSTOM_JP].cs__freeze
|
45
45
|
# Fallback for Custom, most likely self-hosted, Environments
|
46
46
|
EOP = 'EOP'
|
47
|
+
REJECTED_VALUES = [:EMPTY_VALUE, 'NEEDS_TO_BE_SET', Contrast::Utils::ObjectShare::EMPTY_STRING].cs__freeze
|
47
48
|
|
48
49
|
def initialize
|
49
50
|
super
|
51
|
+
@settings = []
|
52
|
+
add_config_keys ::Contrast::CONFIG.root, 'root'
|
53
|
+
@settings << ENV.keys.select { |v| v.starts_with?('CONTRAST') }
|
54
|
+
@settings.flatten
|
50
55
|
add_tags
|
51
56
|
end
|
52
57
|
|
@@ -55,14 +60,25 @@ module Contrast
|
|
55
60
|
end
|
56
61
|
|
57
62
|
def add_tags
|
58
|
-
|
59
|
-
@tags['agent_version'] = VERSION
|
60
|
-
@tags['ruby_version'] = RUBY_VERSION
|
61
|
-
@tags['os_type'] = sys_info['os_type'] == 'Darwin' ? 'MacOS' : 'Linux'
|
62
|
-
@tags['os_arch'] = sys_info['os_arch']
|
63
|
-
@tags['os_version'] = sys_info['os_version']
|
63
|
+
add_system_tags
|
64
64
|
@tags['app_framework_and_version'] = APP_AND_SERVER_DATA[:application_info].to_s
|
65
65
|
@tags['server_framework_and_version'] = APP_AND_SERVER_DATA[:server_info].to_s
|
66
|
+
@tags['ASSESS'] = Contrast::ASSESS.enabled?.to_s
|
67
|
+
@tags['PROTECT'] = Contrast::PROTECT.enabled?.to_s
|
68
|
+
@tags['settings'] = @settings.join(',')
|
69
|
+
end
|
70
|
+
|
71
|
+
def add_config_keys config, nested_key
|
72
|
+
config.configuration_map.reject! { |_k, v| REJECTED_VALUES.include?(v) }
|
73
|
+
|
74
|
+
config.configuration_map.each do |k, v|
|
75
|
+
unless v.cs__class <= Contrast::Config::BaseConfiguration
|
76
|
+
@settings << "#{ nested_key }.#{ k }"
|
77
|
+
next
|
78
|
+
end
|
79
|
+
|
80
|
+
add_config_keys v, "#{ nested_key }.#{ k }"
|
81
|
+
end
|
66
82
|
end
|
67
83
|
|
68
84
|
def sys_info
|
@@ -89,6 +105,17 @@ module Contrast
|
|
89
105
|
end
|
90
106
|
end
|
91
107
|
end
|
108
|
+
|
109
|
+
# Here we attach the key-value pairs of the system
|
110
|
+
#
|
111
|
+
def add_system_tags
|
112
|
+
@tags['teamserver'] = teamserver_type
|
113
|
+
@tags['agent_version'] = VERSION
|
114
|
+
@tags['ruby_version'] = RUBY_VERSION
|
115
|
+
@tags['os_type'] = sys_info['os_type'] == 'Darwin' ? 'MacOS' : 'Linux'
|
116
|
+
@tags['os_arch'] = sys_info['os_arch']
|
117
|
+
@tags['os_version'] = sys_info['os_version']
|
118
|
+
end
|
92
119
|
end
|
93
120
|
end
|
94
121
|
end
|
@@ -1,8 +1,9 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/components/logger'
|
5
5
|
require 'contrast/components/scope'
|
6
|
+
require 'contrast/agent/reporting/reporting_events/application_update'
|
6
7
|
require 'contrast/api/decorators/application_update'
|
7
8
|
|
8
9
|
module Contrast
|
@@ -23,7 +24,6 @@ module Contrast
|
|
23
24
|
end
|
24
25
|
end
|
25
26
|
|
26
|
-
# TODO: RUBY-1354
|
27
27
|
# TODO: RUBY-1356
|
28
28
|
def send_inventory_message
|
29
29
|
return unless ::Contrast::INVENTORY.enabled?
|
@@ -31,7 +31,17 @@ module Contrast
|
|
31
31
|
app_update_msg = Contrast::Api::Dtm::ApplicationUpdate.build
|
32
32
|
|
33
33
|
Contrast::Agent::Inventory::DatabaseConfig.append_db_config(app_update_msg)
|
34
|
-
|
34
|
+
# TODO: RUBY-1438 -- remove and build ReportingEvent directly
|
35
|
+
if Contrast::Agent.reporter
|
36
|
+
report = Contrast::Agent::Reporting::DtmMessage.dtm_to_event(app_update_msg)
|
37
|
+
Contrast::Agent.reporter.send_event(report)
|
38
|
+
|
39
|
+
# This is being reported separately because we extract the data from the same message
|
40
|
+
inventory_report = Contrast::Agent::Reporting::ApplicationInventory.convert(app_update_msg)
|
41
|
+
Contrast::Agent.reporter.send_event(inventory_report)
|
42
|
+
else
|
43
|
+
Contrast::Agent.messaging_queue.send_event_eventually(app_update_msg)
|
44
|
+
end
|
35
45
|
end
|
36
46
|
|
37
47
|
private
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/config/env_variables'
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/utils/metrics_hash'
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/components/scope'
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/components/logger'
|
@@ -59,7 +59,7 @@ module Contrast
|
|
59
59
|
messaging_queue.stop!
|
60
60
|
heapdump_util.stop!
|
61
61
|
telemetry_queue&.stop!
|
62
|
-
|
62
|
+
reporter&.stop!
|
63
63
|
end
|
64
64
|
|
65
65
|
def heartbeat_thread_init
|
@@ -108,7 +108,7 @@ module Contrast
|
|
108
108
|
end
|
109
109
|
|
110
110
|
# @return [Contrast::Agent::Reporter]
|
111
|
-
def
|
111
|
+
def reporter
|
112
112
|
return if @reporter.nil?
|
113
113
|
|
114
114
|
@reporter
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/components/logger'
|
@@ -46,9 +46,6 @@ module Contrast
|
|
46
46
|
Contrast::Agent.framework_manager.register_late_framework(loaded_module)
|
47
47
|
Contrast::Agent::Inventory::DependencyUsageAnalysis.instance.associate_file(path) if path
|
48
48
|
Contrast::Agent::Patching::Policy::Patcher.patch_specific_module(loaded_module)
|
49
|
-
if RUBY_VERSION < '2.6.0' # TODO: RUBY-714 remove guard w/ EOL of 2.5
|
50
|
-
Contrast::Agent::Assess::Policy::RewriterPatch.rewrite_interpolation(loaded_module)
|
51
|
-
end
|
52
49
|
Contrast::Agent::Assess::Policy::PolicyScanner.scan(tracepoint_event)
|
53
50
|
rescue StandardError => e
|
54
51
|
logger.error('Unable to complete TracePoint analysis', e, module: loaded_module, path: path)
|
@@ -1,8 +1,8 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
module Contrast
|
5
5
|
module Agent
|
6
|
-
VERSION = '
|
6
|
+
VERSION = '5.0.0'
|
7
7
|
end
|
8
8
|
end
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
module Contrast
|
data/lib/contrast/agent.rb
CHANGED
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'English'
|
@@ -76,10 +76,10 @@ module Contrast
|
|
76
76
|
end
|
77
77
|
|
78
78
|
# @return [nil, Contrast::Agent::Reporter]
|
79
|
-
def self.
|
80
|
-
return unless thread_watcher.
|
79
|
+
def self.reporter
|
80
|
+
return unless thread_watcher.reporter
|
81
81
|
|
82
|
-
thread_watcher.
|
82
|
+
thread_watcher.reporter
|
83
83
|
end
|
84
84
|
|
85
85
|
def self.thread_watcher
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
module Contrast
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/components/logger'
|
@@ -16,7 +16,7 @@ module Contrast
|
|
16
16
|
|
17
17
|
def initialize
|
18
18
|
@speedracer = Contrast::Api::Communication::Speedracer.new
|
19
|
-
@audit = Contrast::Agent::Reporting::Audit.new if ::Contrast::API.request_audit_enable
|
19
|
+
@audit = Contrast::Agent::Reporting::Audit.new if ::Contrast::API.request_audit_enable?
|
20
20
|
super
|
21
21
|
end
|
22
22
|
|
@@ -34,7 +34,7 @@ module Contrast
|
|
34
34
|
return
|
35
35
|
end
|
36
36
|
response_data = speedracer.return_response(event)
|
37
|
-
return response_data unless ::Contrast::API.request_audit_enable
|
37
|
+
return response_data unless ::Contrast::API.request_audit_enable?
|
38
38
|
|
39
39
|
@audit&.audit_event(event, response_data)
|
40
40
|
response_data
|
@@ -63,7 +63,7 @@ module Contrast
|
|
63
63
|
end
|
64
64
|
logger.debug('Enqueued event for sending', event_type: event.cs__class)
|
65
65
|
queue << event if event
|
66
|
-
return unless ::Contrast::API.request_audit_enable
|
66
|
+
return unless ::Contrast::API.request_audit_enable?
|
67
67
|
|
68
68
|
@audit&.audit_event(event)
|
69
69
|
end
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/agent/reaction_processor'
|
@@ -8,8 +8,12 @@ module Contrast
|
|
8
8
|
module Api
|
9
9
|
module Communication
|
10
10
|
# Handles processing deferred messages sent to SpeedRacer.
|
11
|
+
#
|
12
|
+
# @attr_reader last_app_update_ms [Integer] the time, in ms, that application settings last changed
|
13
|
+
# @attr_reader last_server_update_ms [Integer] the time, in ms, that server settings last changed
|
11
14
|
class ResponseProcessor
|
12
15
|
include Contrast::Components::Logger::InstanceMethods
|
16
|
+
attr_reader :last_app_update_ms, :last_server_update_ms
|
13
17
|
|
14
18
|
# Use the given response to update the Agent's server features and application settings, allowing it to reflect
|
15
19
|
# the latest options configured by the user in TeamServer
|
@@ -44,7 +48,7 @@ module Contrast
|
|
44
48
|
logger.trace('Agent: Received updated server features')
|
45
49
|
|
46
50
|
::Contrast::SETTINGS.update_from_server_features(server_features)
|
47
|
-
|
51
|
+
@last_server_update_ms = Contrast::Utils::Timer.now_ms
|
48
52
|
server_features
|
49
53
|
end
|
50
54
|
|
@@ -60,15 +64,15 @@ module Contrast
|
|
60
64
|
logger.debug('Agent: Received updated application settings')
|
61
65
|
|
62
66
|
::Contrast::SETTINGS.update_from_application_settings(app_settings)
|
63
|
-
|
67
|
+
@last_app_update_ms = Contrast::Utils::Timer.now_ms
|
64
68
|
app_settings
|
65
69
|
end
|
66
70
|
|
67
71
|
# This can't go in the Settings component because protect and assess depend on settings
|
68
72
|
# I don't think it should go into contrast_service because that only handles connection specific data.
|
69
73
|
#
|
70
|
-
# @param server_features [Contrast::Api::Settings::AgentSettings]
|
71
|
-
# @param app_settings [Contrast::Api::Settings::ApplicationSettings]
|
74
|
+
# @param server_features [Contrast::Api::Settings::AgentSettings, Array]
|
75
|
+
# @param app_settings [Contrast::Api::Settings::ApplicationSettings, Array]
|
72
76
|
def update_features server_features, app_settings
|
73
77
|
return unless !!(server_features || app_settings)
|
74
78
|
return unless ::Contrast::AGENT.enabled?
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/components/logger'
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
module Contrast
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'socket'
|
@@ -105,6 +105,9 @@ module Contrast
|
|
105
105
|
to_service = Contrast::Api::Dtm::Message.encode(msg)
|
106
106
|
from_service = send_marshaled(to_service)
|
107
107
|
response = Contrast::Api::Settings::AgentSettings.decode(from_service)
|
108
|
+
logger.debug('RESPONSE FROM TS')
|
109
|
+
logger.debug(from_service)
|
110
|
+
logger.debug('RESPONSE FROM TS')
|
108
111
|
logger.debug('Received response.', msg_id: msg.__id__, p_id: msg.pid, msg_count: msg.message_count,
|
109
112
|
response_id: response&.__id__)
|
110
113
|
response
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/components/logger'
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/api/communication/socket'
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/api/communication/socket'
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
module Contrast
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/api/dtm.pb'
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/api/dtm.pb'
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/utils/string_utils'
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/api/dtm.pb'
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# Copyright (c)
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require 'contrast/utils/string_utils'
|
@@ -0,0 +1,36 @@
|
|
1
|
+
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
|
2
|
+
# frozen_string_literal: true
|
3
|
+
|
4
|
+
require 'contrast/utils/string_utils'
|
5
|
+
|
6
|
+
module Contrast
|
7
|
+
module Api
|
8
|
+
module Decorators
|
9
|
+
# Used to decorate the {Contrast::Api::Dtm::ArchitectureComponent} protobuf model so it can own some of the data
|
10
|
+
# massaging required for AppUpdate and Activity dtms.
|
11
|
+
module ArchitectureComponent
|
12
|
+
def self.included klass
|
13
|
+
klass.extend(ClassMethods)
|
14
|
+
end
|
15
|
+
|
16
|
+
# Used to add class methods to the ApplicationUpdate class on inclusion of the decorator
|
17
|
+
module ClassMethods
|
18
|
+
# TeamServer only accepts certain values for ArchitectureComponents.
|
19
|
+
# DO NOT CHANGE THIS!
|
20
|
+
AC_TYPE_DB = 'db'
|
21
|
+
|
22
|
+
# Create a Contrast::Api::Dtm::ArchitectureComponent of the database type.
|
23
|
+
#
|
24
|
+
# @return [Contrast::Api::Dtm::ArchitectureComponent]
|
25
|
+
def build_database
|
26
|
+
msg = Contrast::Api::Dtm::ArchitectureComponent.new
|
27
|
+
msg.type = AC_TYPE_DB
|
28
|
+
msg
|
29
|
+
end
|
30
|
+
end
|
31
|
+
end
|
32
|
+
end
|
33
|
+
end
|
34
|
+
end
|
35
|
+
|
36
|
+
Contrast::Api::Dtm::ArchitectureComponent.include(Contrast::Api::Decorators::ArchitectureComponent)
|