contrast-agent 5.1.0 → 6.0.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/ext/cs__assess_array/cs__assess_array.c +7 -0
- data/ext/cs__assess_basic_object/cs__assess_basic_object.c +19 -5
- data/ext/cs__assess_fiber_track/cs__assess_fiber_track.c +1 -1
- data/ext/cs__assess_hash/cs__assess_hash.c +3 -4
- data/ext/cs__assess_kernel/cs__assess_kernel.c +7 -5
- data/ext/cs__assess_marshal_module/cs__assess_marshal_module.c +26 -12
- data/ext/cs__assess_module/cs__assess_module.c +7 -7
- data/ext/cs__assess_string/cs__assess_string.c +13 -1
- data/ext/cs__common/cs__common.c +16 -11
- data/ext/cs__common/cs__common.h +1 -0
- data/ext/cs__contrast_patch/cs__contrast_patch.c +100 -64
- data/ext/cs__contrast_patch/cs__contrast_patch.h +2 -0
- data/ext/cs__os_information/cs__os_information.c +13 -10
- data/ext/cs__scope/cs__scope.c +796 -0
- data/ext/cs__scope/cs__scope.h +88 -0
- data/ext/cs__scope/extconf.rb +5 -0
- data/lib/contrast/agent/assess/contrast_event.rb +20 -13
- data/lib/contrast/agent/assess/contrast_object.rb +4 -1
- data/lib/contrast/agent/assess/finalizers/hash.rb +2 -0
- data/lib/contrast/agent/assess/policy/policy_node.rb +50 -27
- data/lib/contrast/agent/assess/policy/policy_node_utils.rb +51 -0
- data/lib/contrast/agent/assess/policy/preshift.rb +8 -2
- data/lib/contrast/agent/assess/policy/propagation_method.rb +47 -13
- data/lib/contrast/agent/assess/policy/propagation_node.rb +2 -5
- data/lib/contrast/agent/assess/policy/propagator/buffer.rb +118 -0
- data/lib/contrast/agent/assess/policy/propagator/keep.rb +19 -4
- data/lib/contrast/agent/assess/policy/propagator/match_data.rb +2 -0
- data/lib/contrast/agent/assess/policy/propagator/remove.rb +18 -2
- data/lib/contrast/agent/assess/policy/propagator/splat.rb +17 -3
- data/lib/contrast/agent/assess/policy/propagator/substitution.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/substitution_utils.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator/trim.rb +1 -1
- data/lib/contrast/agent/assess/policy/propagator.rb +1 -0
- data/lib/contrast/agent/assess/policy/source_method.rb +7 -7
- data/lib/contrast/agent/assess/policy/trigger_method.rb +6 -1
- data/lib/contrast/agent/assess/property/tagged.rb +1 -1
- data/lib/contrast/agent/assess/rule/response/{autocomplete_rule.rb → auto_complete_rule.rb} +4 -3
- data/lib/contrast/agent/assess/rule/response/base_rule.rb +12 -79
- data/lib/contrast/agent/assess/rule/response/body_rule.rb +109 -0
- data/lib/contrast/agent/assess/rule/response/cache_control_header_rule.rb +157 -0
- data/lib/contrast/agent/assess/rule/response/click_jacking_header_rule.rb +26 -0
- data/lib/contrast/agent/assess/rule/response/csp_header_insecure_rule.rb +14 -15
- data/lib/contrast/agent/assess/rule/response/csp_header_missing_rule.rb +5 -25
- data/lib/contrast/agent/assess/rule/response/framework/rails_support.rb +29 -0
- data/lib/contrast/agent/assess/rule/response/header_rule.rb +70 -0
- data/lib/contrast/agent/assess/rule/response/hsts_header_rule.rb +12 -36
- data/lib/contrast/agent/assess/rule/response/parameters_pollution_rule.rb +2 -1
- data/lib/contrast/agent/assess/rule/response/x_content_type_header_rule.rb +26 -0
- data/lib/contrast/agent/assess/rule/response/x_xss_protection_header_rule.rb +35 -0
- data/lib/contrast/agent/deadzone/policy/deadzone_node.rb +0 -7
- data/lib/contrast/agent/deadzone/policy/policy.rb +0 -6
- data/lib/contrast/agent/exclusion_matcher.rb +3 -3
- data/lib/contrast/agent/middleware.rb +4 -1
- data/lib/contrast/agent/patching/policy/after_load_patcher.rb +1 -3
- data/lib/contrast/agent/patching/policy/patch.rb +2 -6
- data/lib/contrast/agent/patching/policy/patcher.rb +4 -4
- data/lib/contrast/agent/patching/policy/policy_node.rb +15 -2
- data/lib/contrast/agent/protect/exploitable_collection.rb +38 -0
- data/lib/contrast/agent/protect/input_analyzer/input_analyzer.rb +147 -0
- data/lib/contrast/agent/protect/policy/applies_no_sqli_rule.rb +2 -1
- data/lib/contrast/agent/protect/policy/applies_path_traversal_rule.rb +2 -2
- data/lib/contrast/agent/protect/rule/base.rb +61 -2
- data/lib/contrast/agent/protect/rule/base_service.rb +12 -1
- data/lib/contrast/agent/protect/rule/cmd_injection.rb +15 -0
- data/lib/contrast/agent/protect/rule/cmdi/cmdi_input_classification.rb +83 -0
- data/lib/contrast/agent/protect/rule/cmdi/cmdi_worth_watching.rb +64 -0
- data/lib/contrast/agent/protect/rule/deserialization.rb +6 -0
- data/lib/contrast/agent/protect/rule/http_method_tampering/http_method_tampering_input_classification.rb +96 -0
- data/lib/contrast/agent/protect/rule/http_method_tampering.rb +13 -1
- data/lib/contrast/agent/protect/rule/no_sqli/no_sqli_input_classification.rb +231 -0
- data/lib/contrast/agent/protect/rule/no_sqli.rb +28 -0
- data/lib/contrast/agent/protect/rule/path_traversal.rb +1 -0
- data/lib/contrast/agent/protect/rule/sqli/sqli_input_classification.rb +88 -0
- data/lib/contrast/agent/protect/rule/sqli/sqli_worth_watching.rb +118 -0
- data/lib/contrast/agent/protect/rule/sqli.rb +33 -0
- data/lib/contrast/agent/protect/rule/unsafe_file_upload/unsafe_file_upload_input_classification.rb +82 -0
- data/lib/contrast/agent/protect/rule/unsafe_file_upload/unsafe_file_upload_matcher.rb +45 -0
- data/lib/contrast/agent/protect/rule/unsafe_file_upload.rb +42 -0
- data/lib/contrast/agent/protect/rule/xxe.rb +4 -0
- data/lib/contrast/agent/reporting/attack_result/attack_result.rb +63 -0
- data/lib/contrast/agent/reporting/attack_result/rasp_rule_sample.rb +52 -0
- data/lib/contrast/agent/reporting/attack_result/response_type.rb +29 -0
- data/lib/contrast/agent/reporting/attack_result/user_input.rb +87 -0
- data/lib/contrast/agent/reporting/input_analysis/input_analysis.rb +44 -0
- data/lib/contrast/agent/reporting/input_analysis/input_analysis_result.rb +115 -0
- data/lib/contrast/agent/reporting/input_analysis/input_type.rb +44 -0
- data/lib/contrast/agent/reporting/input_analysis/score_level.rb +21 -0
- data/lib/contrast/agent/reporting/masker/masker.rb +246 -0
- data/lib/contrast/agent/reporting/masker/masker_utils.rb +58 -0
- data/lib/contrast/agent/reporting/report.rb +3 -0
- data/lib/contrast/agent/reporting/reporter.rb +31 -12
- data/lib/contrast/agent/reporting/reporting_events/agent_startup.rb +30 -0
- data/lib/contrast/agent/reporting/reporting_events/application_inventory.rb +7 -3
- data/lib/contrast/agent/reporting/reporting_events/application_startup.rb +40 -0
- data/lib/contrast/agent/reporting/reporting_events/application_startup_instrumentation.rb +27 -0
- data/lib/contrast/agent/reporting/reporting_events/finding.rb +69 -36
- data/lib/contrast/agent/reporting/reporting_events/finding_event.rb +88 -59
- data/lib/contrast/agent/reporting/reporting_events/{finding_object.rb → finding_event_object.rb} +24 -20
- data/lib/contrast/agent/reporting/reporting_events/finding_event_parent_object.rb +39 -0
- data/lib/contrast/agent/reporting/reporting_events/finding_event_property.rb +40 -0
- data/lib/contrast/agent/reporting/reporting_events/{finding_signature.rb → finding_event_signature.rb} +29 -24
- data/lib/contrast/agent/reporting/reporting_events/finding_event_source.rb +12 -8
- data/lib/contrast/agent/reporting/reporting_events/{finding_stack.rb → finding_event_stack.rb} +23 -19
- data/lib/contrast/agent/reporting/reporting_events/{finding_taint_range.rb → finding_event_taint_range.rb} +17 -15
- data/lib/contrast/agent/reporting/reporting_events/finding_request.rb +26 -53
- data/lib/contrast/agent/reporting/reporting_events/library_usage_observation.rb +5 -5
- data/lib/contrast/agent/reporting/reporting_events/observed_route.rb +9 -9
- data/lib/contrast/agent/reporting/reporting_events/poll.rb +29 -0
- data/lib/contrast/agent/reporting/reporting_events/preflight_message.rb +2 -1
- data/lib/contrast/agent/reporting/reporting_events/reporting_event.rb +6 -4
- data/lib/contrast/agent/reporting/reporting_events/route_coverage.rb +8 -6
- data/lib/contrast/agent/reporting/reporting_events/route_discovery.rb +1 -0
- data/lib/contrast/agent/reporting/reporting_events/server_activity.rb +1 -1
- data/lib/contrast/agent/reporting/reporting_utilities/audit.rb +10 -3
- data/lib/contrast/agent/reporting/reporting_utilities/endpoints.rb +0 -1
- data/lib/contrast/agent/reporting/reporting_utilities/reporter_client.rb +17 -5
- data/lib/contrast/agent/reporting/reporting_utilities/reporter_client_utils.rb +54 -45
- data/lib/contrast/agent/reporting/reporting_utilities/reporting_storage.rb +1 -1
- data/lib/contrast/agent/reporting/reporting_utilities/response_extractor.rb +97 -0
- data/lib/contrast/agent/reporting/reporting_utilities/response_handler.rb +69 -7
- data/lib/contrast/agent/reporting/reporting_utilities/response_handler_mode.rb +63 -0
- data/lib/contrast/agent/reporting/reporting_utilities/response_handler_utils.rb +123 -85
- data/lib/contrast/agent/reporting/settings/application_settings.rb +9 -0
- data/lib/contrast/agent/reporting/settings/assess_server_feature.rb +5 -33
- data/lib/contrast/agent/reporting/settings/protect_server_feature.rb +1 -1
- data/lib/contrast/agent/reporting/settings/sampling.rb +36 -0
- data/lib/contrast/agent/reporting/settings/sensitive_data_masking.rb +110 -0
- data/lib/contrast/agent/reporting/settings/sensitive_data_masking_rule.rb +58 -0
- data/lib/contrast/agent/request_context.rb +7 -2
- data/lib/contrast/agent/request_context_extend.rb +85 -21
- data/lib/contrast/agent/request_handler.rb +4 -0
- data/lib/contrast/agent/scope.rb +102 -107
- data/lib/contrast/agent/service_heartbeat.rb +45 -2
- data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_base.rb +51 -0
- data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_event.rb +36 -0
- data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_message.rb +97 -0
- data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_message_exception.rb +65 -0
- data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_stack_frame.rb +47 -0
- data/lib/contrast/agent/{metric_telemetry_event.rb → telemetry/events/metric_telemetry_event.rb} +1 -1
- data/lib/contrast/agent/{startup_metrics_telemetry_event.rb → telemetry/events/startup_metrics_telemetry_event.rb} +3 -3
- data/lib/contrast/agent/{telemetry_event.rb → telemetry/events/telemetry_event.rb} +1 -1
- data/lib/contrast/agent/{telemetry.rb → telemetry/telemetry.rb} +32 -19
- data/lib/contrast/agent/thread_watcher.rb +1 -1
- data/lib/contrast/agent/version.rb +1 -1
- data/lib/contrast/agent.rb +3 -0
- data/lib/contrast/api/communication/speedracer.rb +1 -1
- data/lib/contrast/api/decorators/address.rb +1 -1
- data/lib/contrast/api/decorators/bot_blocker.rb +37 -0
- data/lib/contrast/api/decorators/ip_denylist.rb +37 -0
- data/lib/contrast/api/decorators/rasp_rule_sample.rb +29 -0
- data/lib/contrast/api/decorators/response_type.rb +30 -0
- data/lib/contrast/api/decorators/user_input.rb +11 -1
- data/lib/contrast/api/decorators/virtual_patch.rb +34 -0
- data/lib/contrast/api/decorators.rb +1 -0
- data/lib/contrast/components/app_context.rb +0 -4
- data/lib/contrast/components/assess.rb +14 -0
- data/lib/contrast/components/logger.rb +5 -0
- data/lib/contrast/components/protect.rb +6 -4
- data/lib/contrast/components/sampling.rb +7 -11
- data/lib/contrast/components/scope.rb +98 -91
- data/lib/contrast/components/settings.rb +106 -8
- data/lib/contrast/config/agent_configuration.rb +41 -12
- data/lib/contrast/config/api_configuration.rb +37 -12
- data/lib/contrast/config/api_proxy_configuration.rb +12 -3
- data/lib/contrast/config/application_configuration.rb +38 -14
- data/lib/contrast/config/assess_configuration.rb +47 -12
- data/lib/contrast/config/assess_rules_configuration.rb +15 -3
- data/lib/contrast/config/base_configuration.rb +18 -50
- data/lib/contrast/config/certification_configuration.rb +17 -3
- data/lib/contrast/config/exception_configuration.rb +14 -3
- data/lib/contrast/config/heap_dump_configuration.rb +43 -17
- data/lib/contrast/config/inventory_configuration.rb +17 -3
- data/lib/contrast/config/logger_configuration.rb +10 -3
- data/lib/contrast/config/protect_configuration.rb +17 -7
- data/lib/contrast/config/protect_rule_configuration.rb +17 -8
- data/lib/contrast/config/protect_rules_configuration.rb +115 -17
- data/lib/contrast/config/request_audit_configuration.rb +26 -3
- data/lib/contrast/config/root_configuration.rb +52 -12
- data/lib/contrast/config/ruby_configuration.rb +60 -22
- data/lib/contrast/config/sampling_configuration.rb +19 -9
- data/lib/contrast/config/server_configuration.rb +19 -10
- data/lib/contrast/config/service_configuration.rb +27 -11
- data/lib/contrast/configuration.rb +5 -3
- data/lib/contrast/extension/assess/string.rb +20 -1
- data/lib/contrast/extension/module.rb +0 -1
- data/lib/contrast/framework/manager.rb +2 -2
- data/lib/contrast/logger/application.rb +1 -1
- data/lib/contrast/logger/cef_log.rb +151 -0
- data/lib/contrast/tasks/config.rb +90 -3
- data/lib/contrast/utils/assess/object_store.rb +36 -0
- data/lib/contrast/utils/assess/propagation_method_utils.rb +6 -0
- data/lib/contrast/utils/class_util.rb +3 -12
- data/lib/contrast/utils/hash_digest.rb +14 -6
- data/lib/contrast/utils/input_classification.rb +73 -0
- data/lib/contrast/utils/log_utils.rb +114 -0
- data/lib/contrast/utils/middleware_utils.rb +9 -9
- data/lib/contrast/utils/net_http_base.rb +13 -10
- data/lib/contrast/utils/object_share.rb +2 -1
- data/lib/contrast/utils/os.rb +0 -5
- data/lib/contrast/utils/patching/policy/patch_utils.rb +4 -9
- data/lib/contrast/utils/response_utils.rb +18 -33
- data/lib/contrast/utils/telemetry.rb +1 -1
- data/lib/contrast/utils/telemetry_client.rb +1 -1
- data/lib/contrast/utils/telemetry_identifier.rb +1 -1
- data/lib/contrast.rb +4 -3
- data/resources/assess/policy.json +98 -0
- data/resources/deadzone/policy.json +0 -86
- data/ruby-agent.gemspec +9 -8
- data/service_executables/VERSION +1 -1
- data/service_executables/linux/contrast-service +0 -0
- data/service_executables/mac/contrast-service +0 -0
- metadata +103 -38
- data/lib/contrast/agent/assess/rule/response/cachecontrol_rule.rb +0 -184
- data/lib/contrast/agent/assess/rule/response/clickjacking_rule.rb +0 -66
- data/lib/contrast/agent/assess/rule/response/x_content_type_rule.rb +0 -52
- data/lib/contrast/agent/assess/rule/response/x_xss_protection_rule.rb +0 -53
- data/lib/contrast/extension/kernel.rb +0 -54
@@ -200,92 +200,6 @@
|
|
200
200
|
"method_visibility": "public",
|
201
201
|
"method_name":"exists?",
|
202
202
|
"code": "https://github.com/rails/rails/blob/v6.0.3.4/actionpack/lib/action_dispatch/request/session.rb#L201"
|
203
|
-
},{
|
204
|
-
"class_name": "RSpec::Matchers::BuiltIn::BaseMatcher"
|
205
|
-
},{
|
206
|
-
"class_name": "RSpec::Matchers::BuiltIn::BeAKindOf"
|
207
|
-
},{
|
208
|
-
"class_name": "RSpec::Matchers::BuiltIn::BeAnInstanceOf"
|
209
|
-
},{
|
210
|
-
"class_name": "RSpec::Matchers::BuiltIn::BeBetween"
|
211
|
-
},{
|
212
|
-
"class_name": "RSpec::Matchers::BuiltIn::Be"
|
213
|
-
},{
|
214
|
-
"class_name": "RSpec::Matchers::BuiltIn::BeComparedTo"
|
215
|
-
},{
|
216
|
-
"class_name": "RSpec::Matchers::BuiltIn::BeFalsey"
|
217
|
-
},{
|
218
|
-
"class_name": "RSpec::Matchers::BuiltIn::BeHelpers"
|
219
|
-
},{
|
220
|
-
"class_name": "RSpec::Matchers::BuiltIn::BeNil"
|
221
|
-
},{
|
222
|
-
"class_name": "RSpec::Matchers::BuiltIn::BePredicate"
|
223
|
-
},{
|
224
|
-
"class_name": "RSpec::Matchers::BuiltIn::BeTruthy"
|
225
|
-
},{
|
226
|
-
"class_name": "RSpec::Matchers::BuiltIn::BeWithin"
|
227
|
-
},{
|
228
|
-
"class_name": "RSpec::Matchers::BuiltIn::Change"
|
229
|
-
},{
|
230
|
-
"class_name": "RSpec::Matchers::BuiltIn::ChangeRelatively"
|
231
|
-
},{
|
232
|
-
"class_name": "RSpec::Matchers::BuiltIn::SpecificValuesChange"
|
233
|
-
},{
|
234
|
-
"class_name": "RSpec::Matchers::BuiltIn::Compound"
|
235
|
-
},{
|
236
|
-
"class_name": "RSpec::Matchers::BuiltIn::Compound::And"
|
237
|
-
}, {
|
238
|
-
"class_name": "RSpec::Matchers::BuiltIn::Compound::Or"
|
239
|
-
},{
|
240
|
-
"class_name": "RSpec::Matchers::BuiltIn::ContainExactly"
|
241
|
-
},{
|
242
|
-
"class_name": "RSpec::Matchers::BuiltIn::Cover"
|
243
|
-
},{
|
244
|
-
"class_name": "RSpec::Matchers::BuiltIn::EndWith"
|
245
|
-
},{
|
246
|
-
"class_name": "RSpec::Matchers::BuiltIn::Eq"
|
247
|
-
},{
|
248
|
-
"class_name": "RSpec::Matchers::BuiltIn::Eql"
|
249
|
-
},{
|
250
|
-
"class_name": "RSpec::Matchers::BuiltIn::Equal"
|
251
|
-
},{
|
252
|
-
"class_name": "RSpec::Matchers::BuiltIn::Exist"
|
253
|
-
},{
|
254
|
-
"class_name": "RSpec::Matchers::BuiltIn::Has"
|
255
|
-
},{
|
256
|
-
"class_name": "RSpec::Matchers::BuiltIn::HaveAttributes"
|
257
|
-
},{
|
258
|
-
"class_name": "RSpec::Matchers::BuiltIn::All"
|
259
|
-
},{
|
260
|
-
"class_name": "RSpec::Matchers::BuiltIn::Match"
|
261
|
-
},{
|
262
|
-
"class_name": "RSpec::Matchers::BuiltIn::NegativeOperatorMatcher"
|
263
|
-
},{
|
264
|
-
"class_name": "RSpec::Matchers::BuiltIn::OperatorMatcher"
|
265
|
-
},{
|
266
|
-
"class_name": "RSpec::Matchers::BuiltIn::Output"
|
267
|
-
},{
|
268
|
-
"class_name": "RSpec::Matchers::BuiltIn::PositiveOperatorMatcher"
|
269
|
-
},{
|
270
|
-
"class_name": "RSpec::Matchers::BuiltIn::RaiseError"
|
271
|
-
},{
|
272
|
-
"class_name": "RSpec::Matchers::BuiltIn::RespondTo"
|
273
|
-
},{
|
274
|
-
"class_name": "RSpec::Matchers::BuiltIn::Satisfy"
|
275
|
-
},{
|
276
|
-
"class_name": "RSpec::Matchers::BuiltIn::StartWith"
|
277
|
-
},{
|
278
|
-
"class_name": "RSpec::Matchers::BuiltIn::ThrowSymbol"
|
279
|
-
},{
|
280
|
-
"class_name": "RSpec::Matchers::BuiltIn::YieldControl"
|
281
|
-
},{
|
282
|
-
"class_name": "RSpec::Matchers::BuiltIn::YieldSuccessiveArgs"
|
283
|
-
},{
|
284
|
-
"class_name": "RSpec::Matchers::BuiltIn::YieldWithArgs"
|
285
|
-
},{
|
286
|
-
"class_name": "RSpec::Matchers::BuiltIn::YieldWithNoArgs"
|
287
|
-
},{
|
288
|
-
"class_name": "SimpleCov"
|
289
203
|
}
|
290
204
|
]
|
291
205
|
}
|
data/ruby-agent.gemspec
CHANGED
@@ -50,7 +50,7 @@ end
|
|
50
50
|
def self.add_frameworks spec
|
51
51
|
spec.add_development_dependency 'grape', '~> 1.5', '>= 1.5.2'
|
52
52
|
spec.add_development_dependency 'rack-protection', '>= 2'
|
53
|
-
spec.add_development_dependency 'rails', '
|
53
|
+
spec.add_development_dependency 'rails', '~> 7'
|
54
54
|
spec.add_development_dependency 'sinatra', '>= 2'
|
55
55
|
end
|
56
56
|
|
@@ -70,6 +70,7 @@ def self.add_specs spec
|
|
70
70
|
add_tested_gems(spec)
|
71
71
|
|
72
72
|
spec.add_development_dependency 'benchmark-ips'
|
73
|
+
spec.add_development_dependency 'benchmark-memory', '~> 0.1'
|
73
74
|
spec.add_development_dependency 'climate_control' # mock ENV
|
74
75
|
spec.add_development_dependency 'factory_bot'
|
75
76
|
spec.add_development_dependency 'fake_ftp'
|
@@ -89,11 +90,11 @@ end
|
|
89
90
|
|
90
91
|
# Dependencies used to run all of our Rubocop during the linting phase.
|
91
92
|
def self.add_rubocop spec
|
92
|
-
spec.add_development_dependency 'rubocop', '1.
|
93
|
-
spec.add_development_dependency 'rubocop-performance', '1.
|
94
|
-
spec.add_development_dependency 'rubocop-rails', '2.
|
93
|
+
spec.add_development_dependency 'rubocop', '1.26.1'
|
94
|
+
spec.add_development_dependency 'rubocop-performance', '1.13.3'
|
95
|
+
spec.add_development_dependency 'rubocop-rails', '2.14.2'
|
95
96
|
spec.add_development_dependency 'rubocop-rake', '0.6.0'
|
96
|
-
spec.add_development_dependency 'rubocop-rspec', '2.
|
97
|
+
spec.add_development_dependency 'rubocop-rspec', '2.9.0'
|
97
98
|
end
|
98
99
|
|
99
100
|
# Dependencies not mocked out during RSpec that we test real code of, beyond just frameworks.
|
@@ -169,11 +170,11 @@ Gem::Specification.new do |spec|
|
|
169
170
|
|
170
171
|
spec.summary = 'Contrast Security\'s agent for rack-based applications.'
|
171
172
|
spec.description = 'This gem instantiates a Rack middleware for rack-based ' \
|
172
|
-
|
173
|
-
|
173
|
+
'web applications in order to provide Interactive Application Security ' \
|
174
|
+
'Testing and Protection.'
|
174
175
|
spec.homepage = 'https://www.contrastsecurity.com'
|
175
176
|
spec.license = 'CONTRAST SECURITY (see license file)'
|
176
|
-
spec.required_ruby_version = ['>= 2.
|
177
|
+
spec.required_ruby_version = ['>= 2.7.0', '< 3.2.0']
|
177
178
|
|
178
179
|
spec.bindir = 'exe'
|
179
180
|
spec.executables = ['contrast_service']
|
data/service_executables/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
2.
|
1
|
+
2.28.19
|
Binary file
|
Binary file
|
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: contrast-agent
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version:
|
4
|
+
version: 6.0.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- galen.palmer@contrastsecurity.com
|
@@ -13,7 +13,7 @@ authors:
|
|
13
13
|
autorequire:
|
14
14
|
bindir: exe
|
15
15
|
cert_chain: []
|
16
|
-
date: 2022-
|
16
|
+
date: 2022-04-04 00:00:00.000000000 Z
|
17
17
|
dependencies:
|
18
18
|
- !ruby/object:Gem::Dependency
|
19
19
|
name: bundler
|
@@ -161,42 +161,42 @@ dependencies:
|
|
161
161
|
requirements:
|
162
162
|
- - '='
|
163
163
|
- !ruby/object:Gem::Version
|
164
|
-
version: 1.
|
164
|
+
version: 1.26.1
|
165
165
|
type: :development
|
166
166
|
prerelease: false
|
167
167
|
version_requirements: !ruby/object:Gem::Requirement
|
168
168
|
requirements:
|
169
169
|
- - '='
|
170
170
|
- !ruby/object:Gem::Version
|
171
|
-
version: 1.
|
171
|
+
version: 1.26.1
|
172
172
|
- !ruby/object:Gem::Dependency
|
173
173
|
name: rubocop-performance
|
174
174
|
requirement: !ruby/object:Gem::Requirement
|
175
175
|
requirements:
|
176
176
|
- - '='
|
177
177
|
- !ruby/object:Gem::Version
|
178
|
-
version: 1.
|
178
|
+
version: 1.13.3
|
179
179
|
type: :development
|
180
180
|
prerelease: false
|
181
181
|
version_requirements: !ruby/object:Gem::Requirement
|
182
182
|
requirements:
|
183
183
|
- - '='
|
184
184
|
- !ruby/object:Gem::Version
|
185
|
-
version: 1.
|
185
|
+
version: 1.13.3
|
186
186
|
- !ruby/object:Gem::Dependency
|
187
187
|
name: rubocop-rails
|
188
188
|
requirement: !ruby/object:Gem::Requirement
|
189
189
|
requirements:
|
190
190
|
- - '='
|
191
191
|
- !ruby/object:Gem::Version
|
192
|
-
version: 2.
|
192
|
+
version: 2.14.2
|
193
193
|
type: :development
|
194
194
|
prerelease: false
|
195
195
|
version_requirements: !ruby/object:Gem::Requirement
|
196
196
|
requirements:
|
197
197
|
- - '='
|
198
198
|
- !ruby/object:Gem::Version
|
199
|
-
version: 2.
|
199
|
+
version: 2.14.2
|
200
200
|
- !ruby/object:Gem::Dependency
|
201
201
|
name: rubocop-rake
|
202
202
|
requirement: !ruby/object:Gem::Requirement
|
@@ -217,14 +217,14 @@ dependencies:
|
|
217
217
|
requirements:
|
218
218
|
- - '='
|
219
219
|
- !ruby/object:Gem::Version
|
220
|
-
version: 2.
|
220
|
+
version: 2.9.0
|
221
221
|
type: :development
|
222
222
|
prerelease: false
|
223
223
|
version_requirements: !ruby/object:Gem::Requirement
|
224
224
|
requirements:
|
225
225
|
- - '='
|
226
226
|
- !ruby/object:Gem::Version
|
227
|
-
version: 2.
|
227
|
+
version: 2.9.0
|
228
228
|
- !ruby/object:Gem::Dependency
|
229
229
|
name: simplecov
|
230
230
|
requirement: !ruby/object:Gem::Requirement
|
@@ -277,16 +277,16 @@ dependencies:
|
|
277
277
|
name: rails
|
278
278
|
requirement: !ruby/object:Gem::Requirement
|
279
279
|
requirements:
|
280
|
-
- -
|
280
|
+
- - "~>"
|
281
281
|
- !ruby/object:Gem::Version
|
282
|
-
version:
|
282
|
+
version: '7'
|
283
283
|
type: :development
|
284
284
|
prerelease: false
|
285
285
|
version_requirements: !ruby/object:Gem::Requirement
|
286
286
|
requirements:
|
287
|
-
- -
|
287
|
+
- - "~>"
|
288
288
|
- !ruby/object:Gem::Version
|
289
|
-
version:
|
289
|
+
version: '7'
|
290
290
|
- !ruby/object:Gem::Dependency
|
291
291
|
name: sinatra
|
292
292
|
requirement: !ruby/object:Gem::Requirement
|
@@ -399,6 +399,20 @@ dependencies:
|
|
399
399
|
- - ">="
|
400
400
|
- !ruby/object:Gem::Version
|
401
401
|
version: '0'
|
402
|
+
- !ruby/object:Gem::Dependency
|
403
|
+
name: benchmark-memory
|
404
|
+
requirement: !ruby/object:Gem::Requirement
|
405
|
+
requirements:
|
406
|
+
- - "~>"
|
407
|
+
- !ruby/object:Gem::Version
|
408
|
+
version: '0.1'
|
409
|
+
type: :development
|
410
|
+
prerelease: false
|
411
|
+
version_requirements: !ruby/object:Gem::Requirement
|
412
|
+
requirements:
|
413
|
+
- - "~>"
|
414
|
+
- !ruby/object:Gem::Version
|
415
|
+
version: '0.1'
|
402
416
|
- !ruby/object:Gem::Dependency
|
403
417
|
name: climate_control
|
404
418
|
requirement: !ruby/object:Gem::Requirement
|
@@ -617,19 +631,20 @@ executables:
|
|
617
631
|
- contrast_service
|
618
632
|
extensions:
|
619
633
|
- ext/cs__common/extconf.rb
|
620
|
-
- ext/cs__contrast_patch/extconf.rb
|
621
|
-
- ext/cs__assess_yield_track/extconf.rb
|
622
|
-
- ext/cs__assess_hash/extconf.rb
|
623
|
-
- ext/cs__assess_marshal_module/extconf.rb
|
624
|
-
- ext/cs__assess_fiber_track/extconf.rb
|
625
|
-
- ext/cs__assess_string_interpolation26/extconf.rb
|
626
634
|
- ext/cs__assess_basic_object/extconf.rb
|
627
635
|
- ext/cs__assess_array/extconf.rb
|
628
|
-
- ext/
|
629
|
-
- ext/
|
636
|
+
- ext/cs__assess_string_interpolation26/extconf.rb
|
637
|
+
- ext/cs__contrast_patch/extconf.rb
|
638
|
+
- ext/cs__assess_fiber_track/extconf.rb
|
639
|
+
- ext/cs__assess_marshal_module/extconf.rb
|
630
640
|
- ext/cs__os_information/extconf.rb
|
641
|
+
- ext/cs__assess_yield_track/extconf.rb
|
631
642
|
- ext/cs__assess_string/extconf.rb
|
643
|
+
- ext/cs__assess_hash/extconf.rb
|
644
|
+
- ext/cs__scope/extconf.rb
|
645
|
+
- ext/cs__assess_kernel/extconf.rb
|
632
646
|
- ext/cs__assess_module/extconf.rb
|
647
|
+
- ext/cs__assess_regexp/extconf.rb
|
633
648
|
extra_rdoc_files: []
|
634
649
|
files:
|
635
650
|
- ".clang-format"
|
@@ -687,6 +702,9 @@ files:
|
|
687
702
|
- ext/cs__os_information/cs__os_information.c
|
688
703
|
- ext/cs__os_information/cs__os_information.h
|
689
704
|
- ext/cs__os_information/extconf.rb
|
705
|
+
- ext/cs__scope/cs__scope.c
|
706
|
+
- ext/cs__scope/cs__scope.h
|
707
|
+
- ext/cs__scope/extconf.rb
|
690
708
|
- ext/extconf_common.rb
|
691
709
|
- funchook/LICENSE
|
692
710
|
- funchook/Makefile.in
|
@@ -834,6 +852,7 @@ files:
|
|
834
852
|
- lib/contrast/agent/assess/policy/patcher.rb
|
835
853
|
- lib/contrast/agent/assess/policy/policy.rb
|
836
854
|
- lib/contrast/agent/assess/policy/policy_node.rb
|
855
|
+
- lib/contrast/agent/assess/policy/policy_node_utils.rb
|
837
856
|
- lib/contrast/agent/assess/policy/policy_scanner.rb
|
838
857
|
- lib/contrast/agent/assess/policy/preshift.rb
|
839
858
|
- lib/contrast/agent/assess/policy/propagation_method.rb
|
@@ -841,6 +860,7 @@ files:
|
|
841
860
|
- lib/contrast/agent/assess/policy/propagator.rb
|
842
861
|
- lib/contrast/agent/assess/policy/propagator/append.rb
|
843
862
|
- lib/contrast/agent/assess/policy/propagator/base.rb
|
863
|
+
- lib/contrast/agent/assess/policy/propagator/buffer.rb
|
844
864
|
- lib/contrast/agent/assess/policy/propagator/center.rb
|
845
865
|
- lib/contrast/agent/assess/policy/propagator/custom.rb
|
846
866
|
- lib/contrast/agent/assess/policy/propagator/database_write.rb
|
@@ -879,16 +899,19 @@ files:
|
|
879
899
|
- lib/contrast/agent/assess/rule/provider/hardcoded_key.rb
|
880
900
|
- lib/contrast/agent/assess/rule/provider/hardcoded_password.rb
|
881
901
|
- lib/contrast/agent/assess/rule/provider/hardcoded_value_rule.rb
|
882
|
-
- lib/contrast/agent/assess/rule/response/
|
902
|
+
- lib/contrast/agent/assess/rule/response/auto_complete_rule.rb
|
883
903
|
- lib/contrast/agent/assess/rule/response/base_rule.rb
|
884
|
-
- lib/contrast/agent/assess/rule/response/
|
885
|
-
- lib/contrast/agent/assess/rule/response/
|
904
|
+
- lib/contrast/agent/assess/rule/response/body_rule.rb
|
905
|
+
- lib/contrast/agent/assess/rule/response/cache_control_header_rule.rb
|
906
|
+
- lib/contrast/agent/assess/rule/response/click_jacking_header_rule.rb
|
886
907
|
- lib/contrast/agent/assess/rule/response/csp_header_insecure_rule.rb
|
887
908
|
- lib/contrast/agent/assess/rule/response/csp_header_missing_rule.rb
|
909
|
+
- lib/contrast/agent/assess/rule/response/framework/rails_support.rb
|
910
|
+
- lib/contrast/agent/assess/rule/response/header_rule.rb
|
888
911
|
- lib/contrast/agent/assess/rule/response/hsts_header_rule.rb
|
889
912
|
- lib/contrast/agent/assess/rule/response/parameters_pollution_rule.rb
|
890
|
-
- lib/contrast/agent/assess/rule/response/
|
891
|
-
- lib/contrast/agent/assess/rule/response/
|
913
|
+
- lib/contrast/agent/assess/rule/response/x_content_type_header_rule.rb
|
914
|
+
- lib/contrast/agent/assess/rule/response/x_xss_protection_header_rule.rb
|
892
915
|
- lib/contrast/agent/assess/tag.rb
|
893
916
|
- lib/contrast/agent/assess/tracker.rb
|
894
917
|
- lib/contrast/agent/at_exit_hook.rb
|
@@ -904,7 +927,6 @@ files:
|
|
904
927
|
- lib/contrast/agent/inventory/policy/datastores.rb
|
905
928
|
- lib/contrast/agent/inventory/policy/policy.rb
|
906
929
|
- lib/contrast/agent/inventory/policy/trigger_node.rb
|
907
|
-
- lib/contrast/agent/metric_telemetry_event.rb
|
908
930
|
- lib/contrast/agent/middleware.rb
|
909
931
|
- lib/contrast/agent/module_data.rb
|
910
932
|
- lib/contrast/agent/patching/policy/after_load_patch.rb
|
@@ -918,6 +940,8 @@ files:
|
|
918
940
|
- lib/contrast/agent/patching/policy/policy.rb
|
919
941
|
- lib/contrast/agent/patching/policy/policy_node.rb
|
920
942
|
- lib/contrast/agent/patching/policy/trigger_node.rb
|
943
|
+
- lib/contrast/agent/protect/exploitable_collection.rb
|
944
|
+
- lib/contrast/agent/protect/input_analyzer/input_analyzer.rb
|
921
945
|
- lib/contrast/agent/protect/policy/applies_command_injection_rule.rb
|
922
946
|
- lib/contrast/agent/protect/policy/applies_deserialization_rule.rb
|
923
947
|
- lib/contrast/agent/protect/policy/applies_no_sqli_rule.rb
|
@@ -931,41 +955,65 @@ files:
|
|
931
955
|
- lib/contrast/agent/protect/rule/base.rb
|
932
956
|
- lib/contrast/agent/protect/rule/base_service.rb
|
933
957
|
- lib/contrast/agent/protect/rule/cmd_injection.rb
|
958
|
+
- lib/contrast/agent/protect/rule/cmdi/cmdi_input_classification.rb
|
959
|
+
- lib/contrast/agent/protect/rule/cmdi/cmdi_worth_watching.rb
|
934
960
|
- lib/contrast/agent/protect/rule/default_scanner.rb
|
935
961
|
- lib/contrast/agent/protect/rule/deserialization.rb
|
936
962
|
- lib/contrast/agent/protect/rule/http_method_tampering.rb
|
963
|
+
- lib/contrast/agent/protect/rule/http_method_tampering/http_method_tampering_input_classification.rb
|
937
964
|
- lib/contrast/agent/protect/rule/no_sqli.rb
|
938
965
|
- lib/contrast/agent/protect/rule/no_sqli/mongo_no_sql_scanner.rb
|
966
|
+
- lib/contrast/agent/protect/rule/no_sqli/no_sqli_input_classification.rb
|
939
967
|
- lib/contrast/agent/protect/rule/path_traversal.rb
|
940
968
|
- lib/contrast/agent/protect/rule/sql_sample_builder.rb
|
941
969
|
- lib/contrast/agent/protect/rule/sqli.rb
|
942
970
|
- lib/contrast/agent/protect/rule/sqli/default_sql_scanner.rb
|
943
971
|
- lib/contrast/agent/protect/rule/sqli/mysql_sql_scanner.rb
|
944
972
|
- lib/contrast/agent/protect/rule/sqli/postgres_sql_scanner.rb
|
973
|
+
- lib/contrast/agent/protect/rule/sqli/sqli_input_classification.rb
|
974
|
+
- lib/contrast/agent/protect/rule/sqli/sqli_worth_watching.rb
|
945
975
|
- lib/contrast/agent/protect/rule/sqli/sqlite_sql_scanner.rb
|
946
976
|
- lib/contrast/agent/protect/rule/unsafe_file_upload.rb
|
977
|
+
- lib/contrast/agent/protect/rule/unsafe_file_upload/unsafe_file_upload_input_classification.rb
|
978
|
+
- lib/contrast/agent/protect/rule/unsafe_file_upload/unsafe_file_upload_matcher.rb
|
947
979
|
- lib/contrast/agent/protect/rule/xss.rb
|
948
980
|
- lib/contrast/agent/protect/rule/xxe.rb
|
949
981
|
- lib/contrast/agent/protect/rule/xxe/entity_wrapper.rb
|
950
982
|
- lib/contrast/agent/reaction_processor.rb
|
983
|
+
- lib/contrast/agent/reporting/attack_result/attack_result.rb
|
984
|
+
- lib/contrast/agent/reporting/attack_result/rasp_rule_sample.rb
|
985
|
+
- lib/contrast/agent/reporting/attack_result/response_type.rb
|
986
|
+
- lib/contrast/agent/reporting/attack_result/user_input.rb
|
987
|
+
- lib/contrast/agent/reporting/input_analysis/input_analysis.rb
|
988
|
+
- lib/contrast/agent/reporting/input_analysis/input_analysis_result.rb
|
989
|
+
- lib/contrast/agent/reporting/input_analysis/input_type.rb
|
990
|
+
- lib/contrast/agent/reporting/input_analysis/score_level.rb
|
991
|
+
- lib/contrast/agent/reporting/masker/masker.rb
|
992
|
+
- lib/contrast/agent/reporting/masker/masker_utils.rb
|
951
993
|
- lib/contrast/agent/reporting/report.rb
|
952
994
|
- lib/contrast/agent/reporting/reporter.rb
|
995
|
+
- lib/contrast/agent/reporting/reporting_events/agent_startup.rb
|
953
996
|
- lib/contrast/agent/reporting/reporting_events/application_inventory.rb
|
997
|
+
- lib/contrast/agent/reporting/reporting_events/application_startup.rb
|
998
|
+
- lib/contrast/agent/reporting/reporting_events/application_startup_instrumentation.rb
|
954
999
|
- lib/contrast/agent/reporting/reporting_events/application_update.rb
|
955
1000
|
- lib/contrast/agent/reporting/reporting_events/architecture_component.rb
|
956
1001
|
- lib/contrast/agent/reporting/reporting_events/discovered_route.rb
|
957
1002
|
- lib/contrast/agent/reporting/reporting_events/finding.rb
|
958
1003
|
- lib/contrast/agent/reporting/reporting_events/finding_event.rb
|
1004
|
+
- lib/contrast/agent/reporting/reporting_events/finding_event_object.rb
|
1005
|
+
- lib/contrast/agent/reporting/reporting_events/finding_event_parent_object.rb
|
1006
|
+
- lib/contrast/agent/reporting/reporting_events/finding_event_property.rb
|
1007
|
+
- lib/contrast/agent/reporting/reporting_events/finding_event_signature.rb
|
959
1008
|
- lib/contrast/agent/reporting/reporting_events/finding_event_source.rb
|
960
|
-
- lib/contrast/agent/reporting/reporting_events/
|
1009
|
+
- lib/contrast/agent/reporting/reporting_events/finding_event_stack.rb
|
1010
|
+
- lib/contrast/agent/reporting/reporting_events/finding_event_taint_range.rb
|
961
1011
|
- lib/contrast/agent/reporting/reporting_events/finding_request.rb
|
962
|
-
- lib/contrast/agent/reporting/reporting_events/finding_signature.rb
|
963
|
-
- lib/contrast/agent/reporting/reporting_events/finding_stack.rb
|
964
|
-
- lib/contrast/agent/reporting/reporting_events/finding_taint_range.rb
|
965
1012
|
- lib/contrast/agent/reporting/reporting_events/library_discovery.rb
|
966
1013
|
- lib/contrast/agent/reporting/reporting_events/library_usage_observation.rb
|
967
1014
|
- lib/contrast/agent/reporting/reporting_events/observed_library_usage.rb
|
968
1015
|
- lib/contrast/agent/reporting/reporting_events/observed_route.rb
|
1016
|
+
- lib/contrast/agent/reporting/reporting_events/poll.rb
|
969
1017
|
- lib/contrast/agent/reporting/reporting_events/preflight.rb
|
970
1018
|
- lib/contrast/agent/reporting/reporting_events/preflight_message.rb
|
971
1019
|
- lib/contrast/agent/reporting/reporting_events/reporting_event.rb
|
@@ -982,7 +1030,9 @@ files:
|
|
982
1030
|
- lib/contrast/agent/reporting/reporting_utilities/reporter_client_utils.rb
|
983
1031
|
- lib/contrast/agent/reporting/reporting_utilities/reporting_storage.rb
|
984
1032
|
- lib/contrast/agent/reporting/reporting_utilities/response.rb
|
1033
|
+
- lib/contrast/agent/reporting/reporting_utilities/response_extractor.rb
|
985
1034
|
- lib/contrast/agent/reporting/reporting_utilities/response_handler.rb
|
1035
|
+
- lib/contrast/agent/reporting/reporting_utilities/response_handler_mode.rb
|
986
1036
|
- lib/contrast/agent/reporting/reporting_utilities/response_handler_utils.rb
|
987
1037
|
- lib/contrast/agent/reporting/settings/application_settings.rb
|
988
1038
|
- lib/contrast/agent/reporting/settings/assess.rb
|
@@ -991,6 +1041,9 @@ files:
|
|
991
1041
|
- lib/contrast/agent/reporting/settings/protect.rb
|
992
1042
|
- lib/contrast/agent/reporting/settings/protect_server_feature.rb
|
993
1043
|
- lib/contrast/agent/reporting/settings/reaction.rb
|
1044
|
+
- lib/contrast/agent/reporting/settings/sampling.rb
|
1045
|
+
- lib/contrast/agent/reporting/settings/sensitive_data_masking.rb
|
1046
|
+
- lib/contrast/agent/reporting/settings/sensitive_data_masking_rule.rb
|
994
1047
|
- lib/contrast/agent/reporting/settings/server_features.rb
|
995
1048
|
- lib/contrast/agent/request.rb
|
996
1049
|
- lib/contrast/agent/request_context.rb
|
@@ -1000,10 +1053,16 @@ files:
|
|
1000
1053
|
- lib/contrast/agent/rule_set.rb
|
1001
1054
|
- lib/contrast/agent/scope.rb
|
1002
1055
|
- lib/contrast/agent/service_heartbeat.rb
|
1003
|
-
- lib/contrast/agent/startup_metrics_telemetry_event.rb
|
1004
1056
|
- lib/contrast/agent/static_analysis.rb
|
1005
|
-
- lib/contrast/agent/telemetry.rb
|
1006
|
-
- lib/contrast/agent/
|
1057
|
+
- lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_base.rb
|
1058
|
+
- lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_event.rb
|
1059
|
+
- lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_message.rb
|
1060
|
+
- lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_message_exception.rb
|
1061
|
+
- lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_stack_frame.rb
|
1062
|
+
- lib/contrast/agent/telemetry/events/metric_telemetry_event.rb
|
1063
|
+
- lib/contrast/agent/telemetry/events/startup_metrics_telemetry_event.rb
|
1064
|
+
- lib/contrast/agent/telemetry/events/telemetry_event.rb
|
1065
|
+
- lib/contrast/agent/telemetry/telemetry.rb
|
1007
1066
|
- lib/contrast/agent/thread.rb
|
1008
1067
|
- lib/contrast/agent/thread_watcher.rb
|
1009
1068
|
- lib/contrast/agent/tracepoint_hook.rb
|
@@ -1028,14 +1087,17 @@ files:
|
|
1028
1087
|
- lib/contrast/api/decorators/application_startup.rb
|
1029
1088
|
- lib/contrast/api/decorators/application_update.rb
|
1030
1089
|
- lib/contrast/api/decorators/architecture_component.rb
|
1090
|
+
- lib/contrast/api/decorators/bot_blocker.rb
|
1031
1091
|
- lib/contrast/api/decorators/finding.rb
|
1032
1092
|
- lib/contrast/api/decorators/http_request.rb
|
1033
1093
|
- lib/contrast/api/decorators/input_analysis.rb
|
1034
1094
|
- lib/contrast/api/decorators/instrumentation_mode.rb
|
1095
|
+
- lib/contrast/api/decorators/ip_denylist.rb
|
1035
1096
|
- lib/contrast/api/decorators/library.rb
|
1036
1097
|
- lib/contrast/api/decorators/library_usage_update.rb
|
1037
1098
|
- lib/contrast/api/decorators/message.rb
|
1038
1099
|
- lib/contrast/api/decorators/rasp_rule_sample.rb
|
1100
|
+
- lib/contrast/api/decorators/response_type.rb
|
1039
1101
|
- lib/contrast/api/decorators/route_coverage.rb
|
1040
1102
|
- lib/contrast/api/decorators/server_features.rb
|
1041
1103
|
- lib/contrast/api/decorators/trace_event.rb
|
@@ -1044,6 +1106,7 @@ files:
|
|
1044
1106
|
- lib/contrast/api/decorators/trace_taint_range.rb
|
1045
1107
|
- lib/contrast/api/decorators/trace_taint_range_tags.rb
|
1046
1108
|
- lib/contrast/api/decorators/user_input.rb
|
1109
|
+
- lib/contrast/api/decorators/virtual_patch.rb
|
1047
1110
|
- lib/contrast/api/dtm.pb.rb
|
1048
1111
|
- lib/contrast/api/settings.pb.rb
|
1049
1112
|
- lib/contrast/components/agent.rb
|
@@ -1099,7 +1162,6 @@ files:
|
|
1099
1162
|
- lib/contrast/extension/delegator.rb
|
1100
1163
|
- lib/contrast/extension/extension.rb
|
1101
1164
|
- lib/contrast/extension/inventory.rb
|
1102
|
-
- lib/contrast/extension/kernel.rb
|
1103
1165
|
- lib/contrast/extension/module.rb
|
1104
1166
|
- lib/contrast/extension/protect.rb
|
1105
1167
|
- lib/contrast/extension/protect/psych.rb
|
@@ -1121,6 +1183,7 @@ files:
|
|
1121
1183
|
- lib/contrast/framework/sinatra/support.rb
|
1122
1184
|
- lib/contrast/funchook/funchook.rb
|
1123
1185
|
- lib/contrast/logger/application.rb
|
1186
|
+
- lib/contrast/logger/cef_log.rb
|
1124
1187
|
- lib/contrast/logger/format.rb
|
1125
1188
|
- lib/contrast/logger/log.rb
|
1126
1189
|
- lib/contrast/logger/request.rb
|
@@ -1128,6 +1191,7 @@ files:
|
|
1128
1191
|
- lib/contrast/security_exception.rb
|
1129
1192
|
- lib/contrast/tasks/config.rb
|
1130
1193
|
- lib/contrast/tasks/service.rb
|
1194
|
+
- lib/contrast/utils/assess/object_store.rb
|
1131
1195
|
- lib/contrast/utils/assess/propagation_method_utils.rb
|
1132
1196
|
- lib/contrast/utils/assess/property/tagged_utils.rb
|
1133
1197
|
- lib/contrast/utils/assess/sampling_util.rb
|
@@ -1144,6 +1208,7 @@ files:
|
|
1144
1208
|
- lib/contrast/utils/hash_digest_extend.rb
|
1145
1209
|
- lib/contrast/utils/head_dump_utils_extend.rb
|
1146
1210
|
- lib/contrast/utils/heap_dump_util.rb
|
1211
|
+
- lib/contrast/utils/input_classification.rb
|
1147
1212
|
- lib/contrast/utils/invalid_configuration_util.rb
|
1148
1213
|
- lib/contrast/utils/io_util.rb
|
1149
1214
|
- lib/contrast/utils/job_servers_running.rb
|
@@ -1198,10 +1263,10 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
1198
1263
|
requirements:
|
1199
1264
|
- - ">="
|
1200
1265
|
- !ruby/object:Gem::Version
|
1201
|
-
version: 2.
|
1266
|
+
version: 2.7.0
|
1202
1267
|
- - "<"
|
1203
1268
|
- !ruby/object:Gem::Version
|
1204
|
-
version: 3.
|
1269
|
+
version: 3.2.0
|
1205
1270
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
1206
1271
|
requirements:
|
1207
1272
|
- - ">="
|