contrast-agent 5.3.0 → 6.1.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (306) hide show
  1. checksums.yaml +4 -4
  2. data/.simplecov +1 -1
  3. data/Rakefile +1 -1
  4. data/ext/build_funchook.rb +3 -3
  5. data/ext/cs__assess_array/cs__assess_array.c +7 -0
  6. data/ext/cs__assess_basic_object/cs__assess_basic_object.c +24 -6
  7. data/ext/cs__assess_fiber_track/cs__assess_fiber_track.c +1 -1
  8. data/ext/cs__assess_hash/cs__assess_hash.c +3 -4
  9. data/ext/cs__assess_kernel/cs__assess_kernel.c +1 -2
  10. data/ext/cs__assess_marshal_module/cs__assess_marshal_module.c +26 -12
  11. data/ext/cs__assess_module/cs__assess_module.c +1 -1
  12. data/ext/cs__assess_regexp/cs__assess_regexp.c +15 -2
  13. data/ext/cs__assess_regexp/cs__assess_regexp.h +2 -0
  14. data/ext/cs__assess_string/cs__assess_string.c +21 -1
  15. data/ext/cs__assess_test/cs__assess_test.h +9 -0
  16. data/ext/cs__assess_test/cs__assess_tests.c +22 -0
  17. data/ext/cs__assess_test/extconf.rb +5 -0
  18. data/ext/cs__common/cs__common.c +113 -11
  19. data/ext/cs__common/cs__common.h +29 -5
  20. data/ext/cs__contrast_patch/cs__contrast_patch.c +55 -44
  21. data/ext/cs__os_information/cs__os_information.c +13 -10
  22. data/ext/cs__scope/cs__scope.c +146 -97
  23. data/ext/cs__tests/cs__tests.c +12 -0
  24. data/ext/cs__tests/cs__tests.h +3 -0
  25. data/ext/cs__tests/extconf.rb +5 -0
  26. data/ext/extconf_common.rb +1 -1
  27. data/lib/contrast/agent/assess/contrast_object.rb +16 -16
  28. data/lib/contrast/agent/assess/events/source_event.rb +17 -19
  29. data/lib/contrast/agent/assess/finalizers/hash.rb +4 -2
  30. data/lib/contrast/agent/assess/policy/policy.rb +9 -10
  31. data/lib/contrast/agent/assess/policy/policy_node.rb +58 -36
  32. data/lib/contrast/agent/assess/policy/policy_node_utils.rb +51 -0
  33. data/lib/contrast/agent/assess/policy/policy_scanner.rb +2 -16
  34. data/lib/contrast/agent/assess/policy/preshift.rb +8 -2
  35. data/lib/contrast/agent/assess/policy/propagation_method.rb +48 -14
  36. data/lib/contrast/agent/assess/policy/propagation_node.rb +2 -3
  37. data/lib/contrast/agent/assess/policy/propagator/base.rb +1 -1
  38. data/lib/contrast/agent/assess/policy/propagator/buffer.rb +119 -0
  39. data/lib/contrast/agent/assess/policy/propagator/database_write.rb +1 -1
  40. data/lib/contrast/agent/assess/policy/propagator/keep.rb +19 -4
  41. data/lib/contrast/agent/assess/policy/propagator/remove.rb +18 -2
  42. data/lib/contrast/agent/assess/policy/propagator/splat.rb +17 -3
  43. data/lib/contrast/agent/assess/policy/propagator/split.rb +17 -21
  44. data/lib/contrast/agent/assess/policy/propagator/substitution.rb +1 -1
  45. data/lib/contrast/agent/assess/policy/propagator/substitution_utils.rb +1 -1
  46. data/lib/contrast/agent/assess/policy/propagator/trim.rb +2 -2
  47. data/lib/contrast/agent/assess/policy/propagator.rb +1 -0
  48. data/lib/contrast/agent/assess/policy/source_method.rb +7 -7
  49. data/lib/contrast/agent/assess/policy/source_node.rb +1 -1
  50. data/lib/contrast/agent/assess/policy/trigger_method.rb +11 -17
  51. data/lib/contrast/agent/assess/policy/trigger_node.rb +16 -16
  52. data/lib/contrast/agent/assess/policy/trigger_validation/redos_validator.rb +1 -1
  53. data/lib/contrast/agent/assess/property/evented.rb +2 -2
  54. data/lib/contrast/agent/assess/property/tagged.rb +3 -3
  55. data/lib/contrast/agent/assess/rule/provider/hardcoded_key.rb +6 -8
  56. data/lib/contrast/agent/assess/rule/provider/hardcoded_password.rb +6 -7
  57. data/lib/contrast/agent/assess/rule/provider/hardcoded_value_rule.rb +12 -7
  58. data/lib/contrast/agent/assess/rule/response/auto_complete_rule.rb +1 -1
  59. data/lib/contrast/agent/assess/rule/response/base_rule.rb +13 -6
  60. data/lib/contrast/agent/assess/rule/response/body_rule.rb +3 -3
  61. data/lib/contrast/agent/assess/rule/response/cache_control_header_rule.rb +66 -43
  62. data/lib/contrast/agent/assess/rule/response/click_jacking_header_rule.rb +4 -4
  63. data/lib/contrast/agent/assess/rule/response/csp_header_insecure_rule.rb +6 -6
  64. data/lib/contrast/agent/assess/rule/response/csp_header_missing_rule.rb +4 -4
  65. data/lib/contrast/agent/assess/rule/response/hsts_header_rule.rb +4 -4
  66. data/lib/contrast/agent/assess/rule/response/parameters_pollution_rule.rb +1 -1
  67. data/lib/contrast/agent/assess/rule/response/x_content_type_header_rule.rb +4 -4
  68. data/lib/contrast/agent/assess/rule/response/x_xss_protection_header_rule.rb +3 -4
  69. data/lib/contrast/agent/assess/tag.rb +13 -14
  70. data/lib/contrast/agent/at_exit_hook.rb +12 -1
  71. data/lib/contrast/agent/deadzone/policy/deadzone_node.rb +0 -7
  72. data/lib/contrast/agent/deadzone/policy/policy.rb +0 -6
  73. data/lib/contrast/agent/exclusion_matcher.rb +3 -3
  74. data/lib/contrast/agent/inventory/database_config.rb +10 -3
  75. data/lib/contrast/agent/middleware.rb +10 -5
  76. data/lib/contrast/agent/patching/policy/after_load_patch.rb +3 -5
  77. data/lib/contrast/agent/patching/policy/after_load_patcher.rb +2 -2
  78. data/lib/contrast/agent/patching/policy/method_policy_extend.rb +4 -4
  79. data/lib/contrast/agent/patching/policy/patch.rb +20 -19
  80. data/lib/contrast/agent/patching/policy/patch_status.rb +10 -3
  81. data/lib/contrast/agent/patching/policy/patcher.rb +4 -4
  82. data/lib/contrast/agent/patching/policy/policy.rb +13 -15
  83. data/lib/contrast/agent/patching/policy/policy_node.rb +32 -21
  84. data/lib/contrast/agent/patching/policy/trigger_node.rb +1 -1
  85. data/lib/contrast/agent/protect/exploitable_collection.rb +38 -0
  86. data/lib/contrast/agent/protect/input_analyzer/input_analyzer.rb +132 -75
  87. data/lib/contrast/agent/protect/policy/applies_no_sqli_rule.rb +4 -3
  88. data/lib/contrast/agent/protect/policy/applies_path_traversal_rule.rb +3 -3
  89. data/lib/contrast/agent/protect/policy/applies_xxe_rule.rb +1 -1
  90. data/lib/contrast/agent/protect/policy/rule_applicator.rb +4 -4
  91. data/lib/contrast/agent/protect/rule/base.rb +53 -9
  92. data/lib/contrast/agent/protect/rule/base_service.rb +31 -12
  93. data/lib/contrast/agent/protect/rule/cmd_injection.rb +23 -3
  94. data/lib/contrast/agent/protect/rule/cmdi/cmdi_input_classification.rb +83 -0
  95. data/lib/contrast/agent/protect/rule/cmdi/cmdi_worth_watching.rb +64 -0
  96. data/lib/contrast/agent/protect/rule/default_scanner.rb +2 -1
  97. data/lib/contrast/agent/protect/rule/deserialization.rb +18 -7
  98. data/lib/contrast/agent/protect/rule/http_method_tampering/http_method_tampering_input_classification.rb +96 -0
  99. data/lib/contrast/agent/protect/rule/http_method_tampering.rb +72 -46
  100. data/lib/contrast/agent/protect/rule/no_sqli/no_sqli_input_classification.rb +231 -0
  101. data/lib/contrast/agent/protect/rule/no_sqli.rb +28 -2
  102. data/lib/contrast/agent/protect/rule/path_traversal.rb +13 -3
  103. data/lib/contrast/agent/protect/rule/sqli/sqli_input_classification.rb +18 -54
  104. data/lib/contrast/agent/protect/rule/sqli/sqli_worth_watching.rb +2 -5
  105. data/lib/contrast/agent/protect/rule/sqli.rb +16 -23
  106. data/lib/contrast/agent/protect/rule/unsafe_file_upload/unsafe_file_upload_input_classification.rb +82 -0
  107. data/lib/contrast/agent/protect/rule/unsafe_file_upload/unsafe_file_upload_matcher.rb +45 -0
  108. data/lib/contrast/agent/protect/rule/unsafe_file_upload.rb +42 -0
  109. data/lib/contrast/agent/protect/rule/xss.rb +17 -0
  110. data/lib/contrast/agent/protect/rule/xxe/entity_wrapper.rb +14 -13
  111. data/lib/contrast/agent/protect/rule/xxe.rb +25 -3
  112. data/lib/contrast/agent/reaction_processor.rb +1 -1
  113. data/lib/contrast/agent/reporting/attack_result/attack_result.rb +63 -0
  114. data/lib/contrast/agent/reporting/attack_result/rasp_rule_sample.rb +52 -0
  115. data/lib/contrast/agent/reporting/attack_result/response_type.rb +29 -0
  116. data/lib/contrast/agent/reporting/attack_result/user_input.rb +87 -0
  117. data/lib/contrast/agent/reporting/masker/masker.rb +243 -0
  118. data/lib/contrast/agent/reporting/masker/masker_utils.rb +62 -0
  119. data/lib/contrast/agent/reporting/report.rb +2 -0
  120. data/lib/contrast/agent/reporting/reporter.rb +29 -22
  121. data/lib/contrast/agent/reporting/reporter_heartbeat.rb +49 -0
  122. data/lib/contrast/agent/reporting/reporting_events/agent_startup.rb +34 -0
  123. data/lib/contrast/agent/reporting/reporting_events/application_activity.rb +51 -0
  124. data/lib/contrast/agent/reporting/reporting_events/application_defend_activity.rb +96 -0
  125. data/lib/contrast/agent/reporting/reporting_events/application_defend_attack_activity.rb +70 -0
  126. data/lib/contrast/agent/reporting/reporting_events/application_defend_attack_sample.rb +182 -0
  127. data/lib/contrast/agent/reporting/reporting_events/application_defend_attack_sample_activity.rb +56 -0
  128. data/lib/contrast/agent/reporting/reporting_events/application_defend_attack_sample_stack.rb +22 -0
  129. data/lib/contrast/agent/reporting/reporting_events/application_defend_attacker_activity.rb +70 -0
  130. data/lib/contrast/agent/reporting/reporting_events/application_inventory.rb +13 -5
  131. data/lib/contrast/agent/reporting/reporting_events/application_inventory_activity.rb +60 -0
  132. data/lib/contrast/agent/reporting/reporting_events/application_reporting_event.rb +27 -0
  133. data/lib/contrast/agent/reporting/reporting_events/application_startup.rb +44 -0
  134. data/lib/contrast/agent/reporting/reporting_events/application_startup_instrumentation.rb +27 -0
  135. data/lib/contrast/agent/reporting/reporting_events/application_update.rb +7 -12
  136. data/lib/contrast/agent/reporting/reporting_events/discovered_route.rb +1 -1
  137. data/lib/contrast/agent/reporting/reporting_events/finding.rb +10 -4
  138. data/lib/contrast/agent/reporting/reporting_events/finding_event.rb +2 -4
  139. data/lib/contrast/agent/reporting/reporting_events/finding_event_object.rb +3 -3
  140. data/lib/contrast/agent/reporting/reporting_events/library_usage_observation.rb +5 -5
  141. data/lib/contrast/agent/reporting/reporting_events/observed_library_usage.rb +6 -2
  142. data/lib/contrast/agent/reporting/reporting_events/observed_route.rb +16 -12
  143. data/lib/contrast/agent/reporting/reporting_events/poll.rb +6 -2
  144. data/lib/contrast/agent/reporting/reporting_events/preflight.rb +10 -8
  145. data/lib/contrast/agent/reporting/reporting_events/preflight_message.rb +8 -11
  146. data/lib/contrast/agent/reporting/reporting_events/reporting_event.rb +2 -1
  147. data/lib/contrast/agent/reporting/reporting_events/route_coverage.rb +8 -6
  148. data/lib/contrast/agent/reporting/reporting_events/server_activity.rb +12 -20
  149. data/lib/contrast/agent/reporting/reporting_events/server_reporting_event.rb +27 -0
  150. data/lib/contrast/agent/reporting/reporting_utilities/audit.rb +17 -27
  151. data/lib/contrast/agent/reporting/reporting_utilities/build_preflight.rb +38 -0
  152. data/lib/contrast/agent/reporting/reporting_utilities/dtm_message.rb +8 -0
  153. data/lib/contrast/agent/reporting/reporting_utilities/endpoints.rb +6 -0
  154. data/lib/contrast/agent/reporting/reporting_utilities/headers.rb +1 -2
  155. data/lib/contrast/agent/reporting/reporting_utilities/reporter_client.rb +29 -13
  156. data/lib/contrast/agent/reporting/reporting_utilities/reporter_client_utils.rb +64 -76
  157. data/lib/contrast/agent/reporting/reporting_utilities/reporting_storage.rb +1 -1
  158. data/lib/contrast/agent/reporting/reporting_utilities/response.rb +17 -7
  159. data/lib/contrast/agent/reporting/reporting_utilities/response_extractor.rb +100 -0
  160. data/lib/contrast/agent/reporting/reporting_utilities/response_handler.rb +75 -13
  161. data/lib/contrast/agent/reporting/reporting_utilities/response_handler_mode.rb +63 -0
  162. data/lib/contrast/agent/reporting/reporting_utilities/response_handler_utils.rb +163 -122
  163. data/lib/contrast/agent/reporting/settings/application_settings.rb +10 -1
  164. data/lib/contrast/agent/reporting/settings/assess.rb +5 -5
  165. data/lib/contrast/agent/reporting/settings/assess_server_feature.rb +7 -35
  166. data/lib/contrast/agent/reporting/settings/exclusions.rb +3 -3
  167. data/lib/contrast/agent/reporting/settings/protect.rb +21 -6
  168. data/lib/contrast/agent/reporting/settings/protect_server_feature.rb +6 -6
  169. data/lib/contrast/agent/reporting/settings/reaction.rb +3 -3
  170. data/lib/contrast/agent/reporting/settings/sampling.rb +36 -0
  171. data/lib/contrast/agent/reporting/settings/sensitive_data_masking.rb +110 -0
  172. data/lib/contrast/agent/reporting/settings/sensitive_data_masking_rule.rb +58 -0
  173. data/lib/contrast/agent/reporting/settings/server_features.rb +2 -2
  174. data/lib/contrast/agent/request.rb +5 -5
  175. data/lib/contrast/agent/request_context.rb +25 -21
  176. data/lib/contrast/agent/request_context_extend.rb +12 -25
  177. data/lib/contrast/agent/request_handler.rb +7 -3
  178. data/lib/contrast/agent/response.rb +2 -0
  179. data/lib/contrast/agent/rule_set.rb +2 -2
  180. data/lib/contrast/agent/scope.rb +1 -1
  181. data/lib/contrast/agent/service_heartbeat.rb +6 -48
  182. data/lib/contrast/agent/static_analysis.rb +1 -1
  183. data/lib/contrast/agent/telemetry/base.rb +155 -0
  184. data/lib/contrast/agent/telemetry/events/event.rb +35 -0
  185. data/lib/contrast/agent/telemetry/events/exceptions/obfuscate.rb +119 -0
  186. data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_base.rb +59 -0
  187. data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_event.rb +44 -0
  188. data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_message.rb +115 -0
  189. data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_message_exception.rb +83 -0
  190. data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exception_stack_frame.rb +64 -0
  191. data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exceptions.rb +20 -0
  192. data/lib/contrast/agent/telemetry/events/exceptions/telemetry_exceptions_report.rb +30 -0
  193. data/lib/contrast/agent/telemetry/events/metric_event.rb +28 -0
  194. data/lib/contrast/agent/telemetry/events/startup_metrics_event.rb +123 -0
  195. data/lib/contrast/agent/thread_watcher.rb +52 -68
  196. data/lib/contrast/agent/version.rb +1 -1
  197. data/lib/contrast/agent/worker_thread.rb +8 -0
  198. data/lib/contrast/agent.rb +4 -3
  199. data/lib/contrast/api/communication/messaging_queue.rb +29 -12
  200. data/lib/contrast/api/communication/response_processor.rb +7 -10
  201. data/lib/contrast/api/communication/service_lifecycle.rb +1 -1
  202. data/lib/contrast/api/communication/socket.rb +1 -1
  203. data/lib/contrast/api/communication/socket_client.rb +1 -1
  204. data/lib/contrast/api/communication/speedracer.rb +3 -3
  205. data/lib/contrast/api/decorators/activity.rb +33 -0
  206. data/lib/contrast/api/decorators/address.rb +1 -1
  207. data/lib/contrast/api/decorators/agent_startup.rb +10 -9
  208. data/lib/contrast/api/decorators/application_settings.rb +1 -1
  209. data/lib/contrast/api/decorators/application_startup.rb +4 -4
  210. data/lib/contrast/api/decorators/http_request.rb +1 -1
  211. data/lib/contrast/api/decorators/response_type.rb +17 -0
  212. data/lib/contrast/api/decorators.rb +1 -0
  213. data/lib/contrast/components/agent.rb +1 -1
  214. data/lib/contrast/components/app_context.rb +0 -4
  215. data/lib/contrast/components/assess.rb +14 -0
  216. data/lib/contrast/components/base.rb +1 -1
  217. data/lib/contrast/components/config.rb +19 -28
  218. data/lib/contrast/components/contrast_service.rb +13 -1
  219. data/lib/contrast/components/protect.rb +2 -2
  220. data/lib/contrast/components/sampling.rb +8 -12
  221. data/lib/contrast/components/settings.rb +151 -19
  222. data/lib/contrast/config/agent_configuration.rb +34 -41
  223. data/lib/contrast/config/api_configuration.rb +16 -75
  224. data/lib/contrast/config/api_proxy_configuration.rb +9 -48
  225. data/lib/contrast/config/application_configuration.rb +24 -95
  226. data/lib/contrast/config/assess_configuration.rb +21 -76
  227. data/lib/contrast/config/assess_rules_configuration.rb +13 -38
  228. data/lib/contrast/config/base_configuration.rb +11 -76
  229. data/lib/contrast/config/certification_configuration.rb +15 -68
  230. data/lib/contrast/config/exception_configuration.rb +15 -59
  231. data/lib/contrast/config/heap_dump_configuration.rb +19 -73
  232. data/lib/contrast/config/inventory_configuration.rb +11 -55
  233. data/lib/contrast/config/logger_configuration.rb +8 -41
  234. data/lib/contrast/config/protect_configuration.rb +23 -10
  235. data/lib/contrast/config/protect_rule_configuration.rb +23 -37
  236. data/lib/contrast/config/protect_rules_configuration.rb +39 -43
  237. data/lib/contrast/config/request_audit_configuration.rb +16 -55
  238. data/lib/contrast/config/root_configuration.rb +71 -14
  239. data/lib/contrast/config/ruby_configuration.rb +14 -47
  240. data/lib/contrast/config/sampling_configuration.rb +12 -65
  241. data/lib/contrast/config/server_configuration.rb +13 -45
  242. data/lib/contrast/config/service_configuration.rb +18 -54
  243. data/lib/contrast/configuration.rb +25 -17
  244. data/lib/contrast/extension/assess/array.rb +1 -1
  245. data/lib/contrast/extension/assess/erb.rb +1 -1
  246. data/lib/contrast/extension/assess/marshal.rb +1 -1
  247. data/lib/contrast/extension/assess/string.rb +20 -1
  248. data/lib/contrast/extension/extension.rb +2 -2
  249. data/lib/contrast/extension/module.rb +0 -1
  250. data/lib/contrast/framework/base_support.rb +8 -8
  251. data/lib/contrast/framework/grape/support.rb +3 -3
  252. data/lib/contrast/framework/manager.rb +7 -7
  253. data/lib/contrast/framework/manager_extend.rb +1 -1
  254. data/lib/contrast/framework/rack/patch/session_cookie.rb +1 -1
  255. data/lib/contrast/framework/rails/patch/action_controller_live_buffer.rb +14 -3
  256. data/lib/contrast/framework/rails/patch/assess_configuration.rb +3 -3
  257. data/lib/contrast/framework/rails/patch/rails_application_configuration.rb +1 -1
  258. data/lib/contrast/framework/rails/patch/support.rb +14 -46
  259. data/lib/contrast/framework/rails/support.rb +2 -2
  260. data/lib/contrast/framework/sinatra/support.rb +1 -1
  261. data/lib/contrast/logger/aliased_logging.rb +94 -0
  262. data/lib/contrast/logger/application.rb +1 -5
  263. data/lib/contrast/logger/cef_log.rb +15 -15
  264. data/lib/contrast/logger/format.rb +1 -1
  265. data/lib/contrast/logger/log.rb +8 -8
  266. data/lib/contrast/tasks/config.rb +100 -4
  267. data/lib/contrast/tasks/service.rb +2 -2
  268. data/lib/contrast/utils/assess/object_store.rb +36 -0
  269. data/lib/contrast/utils/assess/propagation_method_utils.rb +6 -0
  270. data/lib/contrast/utils/assess/tracking_util.rb +4 -4
  271. data/lib/contrast/utils/class_util.rb +9 -22
  272. data/lib/contrast/utils/findings.rb +3 -3
  273. data/lib/contrast/utils/hash_digest.rb +6 -7
  274. data/lib/contrast/utils/head_dump_utils_extend.rb +1 -1
  275. data/lib/contrast/utils/input_classification.rb +73 -0
  276. data/lib/contrast/utils/invalid_configuration_util.rb +2 -2
  277. data/lib/contrast/utils/log_utils.rb +7 -5
  278. data/lib/contrast/utils/lru_cache.rb +1 -1
  279. data/lib/contrast/utils/metrics_hash.rb +1 -1
  280. data/lib/contrast/utils/middleware_utils.rb +15 -14
  281. data/lib/contrast/utils/net_http_base.rb +5 -5
  282. data/lib/contrast/utils/object_share.rb +2 -1
  283. data/lib/contrast/utils/os.rb +1 -6
  284. data/lib/contrast/utils/patching/policy/patch_utils.rb +6 -7
  285. data/lib/contrast/utils/request_utils.rb +2 -2
  286. data/lib/contrast/utils/response_utils.rb +18 -33
  287. data/lib/contrast/utils/sha256_builder.rb +4 -4
  288. data/lib/contrast/utils/stack_trace_utils.rb +31 -13
  289. data/lib/contrast/utils/telemetry.rb +22 -7
  290. data/lib/contrast/utils/telemetry_client.rb +28 -16
  291. data/lib/contrast/utils/telemetry_hash.rb +41 -0
  292. data/lib/contrast/utils/telemetry_identifier.rb +18 -3
  293. data/lib/contrast/utils/timer.rb +1 -1
  294. data/lib/contrast.rb +9 -0
  295. data/resources/assess/policy.json +99 -1
  296. data/resources/deadzone/policy.json +0 -86
  297. data/ruby-agent.gemspec +10 -9
  298. data/service_executables/VERSION +1 -1
  299. data/service_executables/linux/contrast-service +0 -0
  300. data/service_executables/mac/contrast-service +0 -0
  301. metadata +99 -29
  302. data/lib/contrast/agent/metric_telemetry_event.rb +0 -26
  303. data/lib/contrast/agent/startup_metrics_telemetry_event.rb +0 -121
  304. data/lib/contrast/agent/telemetry.rb +0 -137
  305. data/lib/contrast/agent/telemetry_event.rb +0 -33
  306. data/lib/contrast/utils/exclude_key.rb +0 -20
@@ -0,0 +1,20 @@
1
+ # Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
+ # frozen_string_literal: true
3
+
4
+ module Contrast
5
+ module Agent
6
+ module Telemetry
7
+ # This is the module that will include every information created and stored for the
8
+ # Telemetry Exceptions
9
+ module TelemetryException
10
+ end
11
+ end
12
+ end
13
+ end
14
+
15
+ require 'contrast/agent/telemetry/events/exceptions/telemetry_exception_base'
16
+ require 'contrast/agent/telemetry/events/exceptions/telemetry_exception_stack_frame'
17
+ require 'contrast/agent/telemetry/events/exceptions/telemetry_exception_message_exception'
18
+ require 'contrast/agent/telemetry/events/exceptions/telemetry_exception_message'
19
+ require 'contrast/agent/telemetry/events/exceptions/telemetry_exception_event'
20
+ require 'contrast/agent/telemetry/events/exceptions/telemetry_exceptions_report'
@@ -0,0 +1,30 @@
1
+ # Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
+ # frozen_string_literal: true
3
+
4
+ module Contrast
5
+ module Agent
6
+ module Telemetry
7
+ # This module will handle the reporting of the TelemetryExceptionHash
8
+ module TelemetryExceptionReport
9
+ # Here we will send any exceptions gathered. The telemetry_hash is split into batches of 256
10
+ # and then added to the telemetry queue. Since this method is called before entering the
11
+ # until queue loop any updates after clearing the Contrast::TELEMETRY_EXCEPTIONS would have
12
+ # to wait for the sending process to be completed, so accumulating new batches.
13
+ # This methods expects queue and error_messages methods from Contrast::Agent::Telemetry::Base
14
+ def push_exceptions
15
+ return unless Contrast::TELEMETRY_EXCEPTIONS&.any?
16
+
17
+ Contrast::TELEMETRY_EXCEPTIONS.values.each_slice(256) { |tuple| error_messages.push(tuple) }
18
+ # Clear the hash. All exceptions now live in @_error_messages instance variable. and we will
19
+ # add them to the queue. Clearing would make the hash available to be populated again while the
20
+ # sending is proceeding.
21
+ Contrast::TELEMETRY_EXCEPTIONS.clear
22
+ # Add batch to queue. We need to shift here, because we want to report from the oldest batch to
23
+ # the newest. And even if somehow the array is filled during sending the new messages would stay
24
+ # and wait their turn.
25
+ queue << error_messages.shift until error_messages.empty?
26
+ end
27
+ end
28
+ end
29
+ end
30
+ end
@@ -0,0 +1,28 @@
1
+ # Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
+ # frozen_string_literal: true
3
+
4
+ require 'contrast/utils/metrics_hash'
5
+ require 'contrast/agent/telemetry/events/event'
6
+
7
+ module Contrast
8
+ module Agent
9
+ module Telemetry
10
+ # This class will hold the basic information for a Telemetry Event
11
+ class MetricEvent < Contrast::Agent::Telemetry::Event
12
+ include Contrast::Utils
13
+
14
+ attr_reader :fields
15
+
16
+ def initialize
17
+ super
18
+ @fields = MetricsHash.new(Numeric)
19
+ @fields['_filler'] = 0
20
+ end
21
+
22
+ def to_hash **_args
23
+ super.merge!({ fields: @fields })
24
+ end
25
+ end
26
+ end
27
+ end
28
+ end
@@ -0,0 +1,123 @@
1
+ # Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
+ # frozen_string_literal: true
3
+
4
+ require 'contrast/utils/metrics_hash'
5
+ require 'contrast/agent/telemetry/events/metric_event'
6
+ require 'contrast/agent/version'
7
+ require 'contrast/utils/os'
8
+
9
+ module Contrast
10
+ module Agent
11
+ module Telemetry
12
+ # This class will hold the Startup Metrics Telemetry Event
13
+ # The class will include initialization of the agent version, language version
14
+ # os type, arch and version
15
+ # application framework and version and server framework
16
+ # It will be initialized and send in Middleware#agent_startup_routine
17
+ class StartupMetricsEvent < Contrast::Agent::Telemetry::MetricEvent
18
+ include Contrast::Utils::OS
19
+
20
+ APP_AND_SERVER_DATA = ::Contrast::APP_CONTEXT.app_and_server_information.cs__freeze
21
+ # Multi-tenant Production Environments
22
+ SAAS_DEFAULT = { addr: 'app.contrastsecurity.com', type: 'SAAS_DEFAULT' }.cs__freeze
23
+ SAAS_CS = { addr: /cs[[:digit:]]+\.contrastsecurity\.com/, type: 'SAAS_DEFAULT' }.cs__freeze
24
+ SAAS_JP = { addr: 'app.contrastsecurity.jp', type: 'SAAS_DEFAULT' }.cs__freeze
25
+ SAAS_CE = { addr: 'ce.contrastsecurity.com', type: 'SAAS_CE' }.cs__freeze
26
+ # Multi-tenant Demo Environments
27
+ SAAS_DEMO = { addr: 'apptwo.contrastsecurity.com', type: 'SAAS_DEMO' }.cs__freeze
28
+ SAAS_POV = { addr: 'eval.contrastsecurity.com', type: 'SAAS_POV' }.cs__freeze
29
+ # Multi-tenant Testing Environment
30
+ SAAS_RESEARCH = { addr: 'security-research.contrastsecurity.com', type: 'SAAS_RESEARCH' }.cs__freeze
31
+ SAAS_ALPHA = { addr: 'alpha.contrastsecurity.com', type: 'SAAS_ALPHA' }.cs__freeze
32
+ SAAS_STAGING = { addr: 'teamserver-staging.contsec.com', type: 'SAAS_TESTING' }.cs__freeze
33
+ SAAS_STAGING_TOKYO = { addr: 'teamserver-staging.contsec.jp', type: 'SAAS_TESTING' }.cs__freeze
34
+ SAAS_TESTING = { addr: 'teamserver-darpa.contsec.com', type: 'SAAS_TESTING' }.cs__freeze
35
+ SAAS_OPS_TESTING = { addr: 'teamserver-ops.contsec.com', type: 'SAAS_TESTING' }.cs__freeze
36
+ # Fallback for Single-tenant Production Environments
37
+ SAAS_CUSTOM = { addr: 'contrastsecurity.com', type: 'SAAS_CUSTOM' }.cs__freeze
38
+ SAAS_CUSTOM_JP = { addr: 'contrastsecurity.jp', type: 'SAAS_CUSTOM' }.cs__freeze
39
+
40
+ SINGLE_MAP_TENANTS = [
41
+ SAAS_DEFAULT, SAAS_JP, SAAS_CE, SAAS_DEMO, SAAS_POV, SAAS_RESEARCH, SAAS_ALPHA,
42
+ SAAS_STAGING, SAAS_STAGING_TOKYO, SAAS_TESTING, SAAS_OPS_TESTING
43
+ ].cs__freeze
44
+ REGEXP_MAP_TENANTS = [SAAS_CS].cs__freeze
45
+ FALLBACK_TENANTS = [SAAS_CUSTOM, SAAS_CUSTOM_JP].cs__freeze
46
+ # Fallback for Custom, most likely self-hosted, Environments
47
+ EOP = 'EOP'
48
+ REJECTED_VALUES = [nil, 'NEEDS_TO_BE_SET', Contrast::Utils::ObjectShare::EMPTY_STRING].cs__freeze
49
+
50
+ def initialize
51
+ super
52
+ @settings = []
53
+ add_config_keys(::Contrast::CONFIG.root, 'root')
54
+ @settings << ENV.keys.select { |v| v.starts_with?('CONTRAST') }
55
+ @settings.flatten
56
+ add_tags
57
+ end
58
+
59
+ def path
60
+ '/startup'
61
+ end
62
+
63
+ def add_tags
64
+ add_system_tags
65
+ @tags['app_framework_and_version'] = APP_AND_SERVER_DATA[:application_info].to_s
66
+ @tags['server_framework_and_version'] = APP_AND_SERVER_DATA[:server_info].to_s
67
+ @tags['ASSESS'] = Contrast::ASSESS.enabled?.to_s
68
+ @tags['PROTECT'] = Contrast::PROTECT.enabled?.to_s
69
+ @tags['settings'] = @settings.join(',')
70
+ end
71
+
72
+ def add_config_keys config, nested_key
73
+ config.to_hash.reject! { |_k, v| REJECTED_VALUES.include?(v) }
74
+
75
+ config.to_hash.each do |k, v|
76
+ unless v.cs__class <= Contrast::Config::BaseConfiguration
77
+ @settings << "#{ nested_key }.#{ k }"
78
+ next
79
+ end
80
+
81
+ add_config_keys(v, "#{ nested_key }.#{ k }")
82
+ end
83
+ end
84
+
85
+ def sys_info
86
+ @sys_info ||= get_system_information if @sys_info.nil?
87
+ @sys_info
88
+ end
89
+
90
+ private
91
+
92
+ # Here we extract the TeamServer url type
93
+ #
94
+ # @return [String] the type of TeamServer environment to which we're connecting
95
+ def teamserver_type
96
+ @_teamserver_type ||= begin
97
+ url = Contrast::API.api_url
98
+ if (single = SINGLE_MAP_TENANTS.find { |tenant| url.include?(tenant[:addr]) })
99
+ single[:type]
100
+ elsif (regexp = REGEXP_MAP_TENANTS.find { |tenant| tenant[:addr].match?(url) })
101
+ regexp[:type]
102
+ elsif (fallback = FALLBACK_TENANTS.find { |tenant| url.include?(tenant[:addr]) })
103
+ fallback[:type]
104
+ else
105
+ EOP
106
+ end
107
+ end
108
+ end
109
+
110
+ # Here we attach the key-value pairs of the system
111
+ #
112
+ def add_system_tags
113
+ @tags['teamserver'] = teamserver_type
114
+ @tags['agent_version'] = VERSION
115
+ @tags['ruby_version'] = RUBY_VERSION
116
+ @tags['os_type'] = sys_info['os_type'] == 'Darwin' ? 'MacOS' : 'Linux'
117
+ @tags['os_arch'] = sys_info['os_arch']
118
+ @tags['os_version'] = sys_info['os_version']
119
+ end
120
+ end
121
+ end
122
+ end
123
+ end
@@ -5,46 +5,58 @@ require 'contrast/components/logger'
5
5
  require 'contrast/agent/service_heartbeat'
6
6
  require 'contrast/api/communication/messaging_queue'
7
7
  require 'contrast/agent/reporting/report'
8
- require 'contrast/agent/telemetry'
8
+ require 'contrast/agent/reporting/reporter_heartbeat'
9
+ require 'contrast/agent/telemetry/base'
9
10
 
10
11
  module Contrast
11
12
  module Agent
12
13
  # This class used to ensure that our worker threads are running in multi-process environments
13
- #
14
- # @attr_reader heapdump_util [Contrast::Utils::HeapDumpUtil]
15
- # @attr_reader heartbeat [Contrast::Agent::ServiceHeartbeat]
16
- # @attr_reader messaging_queue [Contrast::Api::Communication::MessagingQueue]
17
14
  class ThreadWatcher
18
15
  include Contrast::Components::Logger::InstanceMethods
19
16
 
20
- attr_reader :heapdump_util, :heartbeat, :messaging_queue
17
+ # @return [Contrast::Utils::HeapDumpUtil]
18
+ attr_reader :heapdump_util
19
+ # @return [Contrast::Agent::ServiceHeartbeat, nil]
20
+ attr_reader :heartbeat
21
+ # @return [Contrast::Api::Communication::MessagingQueue, nil]
22
+ attr_reader :messaging_queue
23
+ # @return [Contrast::Agent::Reporter]
24
+ attr_reader :reporter
25
+ # @return [Contrast::Agent::ReporterHeartbeat]
26
+ attr_reader :reporter_heartbeat
21
27
 
22
28
  def initialize
23
29
  @pids = {}
24
30
  @heapdump_util = Contrast::Utils::HeapDumpUtil.new
25
- @heartbeat = Contrast::Agent::ServiceHeartbeat.new
26
- @messaging_queue = Contrast::Api::Communication::MessagingQueue.new
27
- @telemetry = Contrast::Agent::Telemetry.new if Contrast::Agent::Telemetry.enabled?
28
- @reporter = Contrast::Agent::Reporter.new if Contrast::Agent::Reporter.enabled?
31
+ unless ::Contrast::CONTRAST_SERVICE.unnecessary?
32
+ @heartbeat = Contrast::Agent::ServiceHeartbeat.new
33
+ @messaging_queue = Contrast::Api::Communication::MessagingQueue.new
34
+ end
35
+ if Contrast::Agent::Reporter.enabled?
36
+ @reporter = Contrast::Agent::Reporter.new
37
+ @reporter_heartbeat = Contrast::Agent::ReporterHeartbeat.new
38
+ end
39
+ @telemetry = Contrast::Agent::Telemetry::Base.new if Contrast::Agent::Telemetry::Base.enabled?
29
40
  end
30
41
 
42
+ # @return [Hash, nil] map of process to thread startup status
31
43
  def startup!
32
44
  return unless ::Contrast::AGENT.enabled?
33
45
 
34
- telemetry_status = telemetry_thread_init
35
- heartbeat_status = heartbeat_thread_init
36
- messaging_status = messaging_thread_init
37
- reporter_status = reporter_thread_init
38
-
39
46
  logger.debug('ThreadWatcher started threads')
40
-
47
+ heartbeat_status = init_thread(heartbeat)
48
+ messaging_status = init_thread(messaging_queue)
41
49
  @pids[Process.pid] = messaging_status && heartbeat_status
42
- return @pids unless Contrast::Agent::Telemetry.enabled?
43
-
44
- @pids[Process.pid] = @pids[Process.pid] && telemetry_status
50
+ if Contrast::Agent::Telemetry::Base.enabled?
51
+ telemetry_status = init_thread(telemetry_queue)
52
+ @pids[Process.pid] = @pids[Process.pid] && telemetry_status
53
+ end
45
54
  return @pids unless Contrast::Agent::Reporter.enabled?
46
55
 
47
- @pids[Process.pid] = @pids[Process.pid] && reporter_status
56
+ reporter_status = init_thread(reporter)
57
+ reporter_heartbeat_status = init_thread(reporter_heartbeat)
58
+ @pids[Process.pid] = @pids[Process.pid] && reporter_status && reporter_heartbeat_status
59
+ @pids
48
60
  end
49
61
 
50
62
  def ensure_running?
@@ -55,63 +67,35 @@ module Contrast
55
67
  end
56
68
 
57
69
  def shutdown!
58
- heartbeat.stop!
59
- messaging_queue.stop!
60
- heapdump_util.stop!
70
+ heartbeat&.stop!
71
+ messaging_queue&.stop!
72
+ heapdump_util&.stop!
61
73
  telemetry_queue&.stop!
62
74
  reporter&.stop!
75
+ reporter_heartbeat&.stop!
63
76
  end
64
77
 
65
- def heartbeat_thread_init
66
- unless heartbeat.running?
67
- logger.debug('Attempting to start heartbeat thread')
68
- heartbeat.start_thread!
69
- end
70
- heartbeat_result = heartbeat.running?
71
- logger.debug('Heartbeat thread status', alive: heartbeat_result)
72
- heartbeat_result
73
- end
74
-
75
- def telemetry_thread_init
76
- @telemetry.start_thread! if @telemetry&.attempt_to_start?
77
- telemetry_result = @telemetry&.running?
78
- logger.debug('Telemetry thread status', alive: telemetry_result)
79
- telemetry_result
80
- end
81
-
82
- def messaging_thread_init
83
- unless messaging_queue.running?
84
- logger.debug('Attempting to start messaging queue thread')
85
- messaging_queue.start_thread!
86
- end
87
- messaging_result = messaging_queue.running?
88
- logger.debug('Messaging thread status', alive: messaging_result)
89
- messaging_result
90
- end
91
-
92
- def reporter_thread_init
93
- @reporter.start_thread! if @reporter&.attempt_to_start?
94
- unless @reporter&.running?
95
- logger.debug('Attempting to start reporter thread')
96
- @reporter&.start_thread!
97
- end
98
- reporter_result = @reporter&.running?
99
- logger.debug('Reporter thread status', alive: reporter_result)
100
- reporter_result
101
- end
102
-
103
- # @return [Contrast::Agent::Telemetry]
78
+ # @return [Contrast::Agent::Telemetry::Base]
104
79
  def telemetry_queue
105
- return if @telemetry.nil?
106
-
107
80
  @telemetry
108
81
  end
109
82
 
110
- # @return [Contrast::Agent::Reporter]
111
- def reporter
112
- return if @reporter.nil?
83
+ private
113
84
 
114
- @reporter
85
+ # Start the thread governed by the given watcher
86
+ #
87
+ # @param watcher [Contrast::Agent::ThreadWatcher]
88
+ # @return [Boolean] if the watched thread started successfully
89
+ def init_thread watcher
90
+ return unless watcher&.attempt_to_start?
91
+
92
+ unless watcher.running?
93
+ logger.debug('Attempting to start thread', type: watcher.to_s)
94
+ watcher.start_thread!
95
+ end
96
+ result = watcher.running?
97
+ logger.debug('Thread status', type: watcher.to_s, alive: result)
98
+ result
115
99
  end
116
100
  end
117
101
  end
@@ -3,6 +3,6 @@
3
3
 
4
4
  module Contrast
5
5
  module Agent
6
- VERSION = '5.3.0'
6
+ VERSION = '6.1.1'
7
7
  end
8
8
  end
@@ -15,10 +15,18 @@ module Contrast
15
15
 
16
16
  def stop!
17
17
  return unless running?
18
+ return unless @_thread
18
19
 
19
20
  Thread.kill(@_thread)
20
21
  @_thread = nil
21
22
  end
23
+
24
+ # Most threads, we always want to start. Some may be controlled by feature guards though, so we need to check.
25
+ #
26
+ # @return [Boolean]
27
+ def attempt_to_start?
28
+ true
29
+ end
22
30
  end
23
31
  end
24
32
  end
@@ -32,6 +32,8 @@ require 'contrast/utils/invalid_configuration_util'
32
32
  # Collect findings
33
33
  require 'contrast/utils/findings'
34
34
 
35
+ # Collect Exploites and Attacks
36
+ require 'contrast/agent/protect/exploitable_collection'
35
37
  # scoping
36
38
  require 'contrast/agent/scope'
37
39
 
@@ -52,6 +54,7 @@ module Contrast
52
54
  # build a map for tracking the context of the current request
53
55
  REQUEST_TRACKER = Contrast::Utils::ThreadTracker.new
54
56
  FINDINGS = Contrast::Utils::Findings.new
57
+ EXPLOITS = Contrast::Agent::Protect::ExploitableCollection.new
55
58
 
56
59
  # @return [Contrast::Framework::Manager]
57
60
  def self.framework_manager
@@ -68,10 +71,8 @@ module Contrast
68
71
  thread_watcher.messaging_queue
69
72
  end
70
73
 
71
- # @return [nil, Contrast::Agent::Telemetry]
74
+ # @return [nil, Contrast::Agent::Telemetry::Base]
72
75
  def self.telemetry_queue
73
- return unless thread_watcher.telemetry_queue
74
-
75
76
  thread_watcher.telemetry_queue
76
77
  end
77
78
 
@@ -2,8 +2,10 @@
2
2
  # frozen_string_literal: true
3
3
 
4
4
  require 'contrast/components/logger'
5
+ require 'contrast/agent/assess/policy/trigger_method'
5
6
  require 'contrast/agent/worker_thread'
6
7
  require 'contrast/agent/reporting/reporting_utilities/audit'
8
+ require 'contrast/api/dtm.pb'
7
9
 
8
10
  module Contrast
9
11
  module Api
@@ -12,11 +14,13 @@ module Contrast
12
14
  class MessagingQueue < Contrast::Agent::WorkerThread
13
15
  include Contrast::Components::Logger::InstanceMethods
14
16
 
17
+ # @return [Contrast::Api::Communication::Speedracer, nil]
15
18
  attr_reader :speedracer
16
19
 
17
20
  def initialize
21
+ return if ::Contrast::CONTRAST_SERVICE.unnecessary?
22
+
18
23
  @speedracer = Contrast::Api::Communication::Speedracer.new
19
- @audit = Contrast::Agent::Reporting::Audit.new if ::Contrast::API.request_audit_enable?
20
24
  super
21
25
  end
22
26
 
@@ -33,18 +37,18 @@ module Contrast
33
37
  logger.warn('Attempted to send event immediately with Agent disabled', caller: caller, event: event)
34
38
  return
35
39
  end
36
- response_data = speedracer.return_response(event)
37
- return response_data unless ::Contrast::API.request_audit_enable?
40
+ return if ::Contrast::CONTRAST_SERVICE.unnecessary?
38
41
 
39
- @audit&.audit_event(event, response_data)
40
- response_data
42
+ speedracer.return_response(event)
41
43
  end
42
44
 
43
45
  # A simple Queue used to hold messages that are ready to be sent to SpeedRacer but for which we do not need an
44
46
  # immediate response
45
47
  #
46
- # @return [Queue]
48
+ # @return [Queue, nil]
47
49
  def queue
50
+ return if ::Contrast::CONTRAST_SERVICE.unnecessary?
51
+
48
52
  @_queue ||= Queue.new
49
53
  end
50
54
 
@@ -54,31 +58,44 @@ module Contrast
54
58
  # application to our post-filter operations as well as those that don't alter the application's execution (i.e.
55
59
  # Assess' vulnerability reporting).
56
60
  #
57
- # @param event [Contrast::Api::Dtm] One of the DTMs valid for the event field of
61
+ # @param event [Contrast::Api::Dtm, Contrast::Api::Dtm::Poll] One of the DTMs valid for the event field of
58
62
  # Contrast::Api::Dtm::Message|Contrast::Api::Dtm::Activity
59
- def send_event_eventually event
63
+ # @param force [Boolean] if we should always queue this event, even if the service isn't running, in case the
64
+ # message may be ready before the service has initiated. usually for those events which happen in a separate
65
+ # thread or which may occur during initialization.
66
+ def send_event_eventually event, force: false
60
67
  if ::Contrast::AGENT.disabled?
61
68
  logger.warn('Attempted to queue event with Agent disabled', caller: caller, event: event)
62
69
  return
63
70
  end
71
+ return if ::Contrast::CONTRAST_SERVICE.unnecessary?
72
+ # If we're unable to start the Service, then we cannot afford to queue messages as this creates the potential
73
+ # for a memory leak, especially if the thread responsible for de-queueing the messages is dead.
74
+ return if !force && !(speedracer.status.connected? && running?)
75
+
76
+ # If we're in direct communication mode, the only message we should queue is the heartbeat to keep the
77
+ # service alive during Protect activities. All other messages should go through direct reporting.
78
+ if ::Contrast::CONTRAST_SERVICE.use_agent_communication?
79
+ return unless ::Contrast::PROTECT.enabled?
80
+ return unless event.cs__is_a?(Contrast::Api::Dtm::Poll)
81
+ end
82
+
64
83
  logger.debug('Enqueued event for sending', event_type: event.cs__class)
65
84
  queue << event if event
66
- return unless ::Contrast::API.request_audit_enable?
67
-
68
- @audit&.audit_event(event)
69
85
  end
70
86
 
71
87
  # Create the reporting thread, which will pull from the queue in order to send messages to SpeedRacer. If
72
88
  # SpeedRacer is not running and should be, meaning the Agent is configured to control it, then we will also
73
89
  # try to start that process.
74
90
  def start_thread!
91
+ return if ::Contrast::CONTRAST_SERVICE.unnecessary?
92
+
75
93
  speedracer.ensure_startup!
76
94
  return if running?
77
95
 
78
96
  @_thread = Contrast::Agent::Thread.new do
79
97
  loop do
80
98
  event = queue.pop
81
-
82
99
  begin
83
100
  logger.debug('Dequeued event for sending', event_type: event.cs__class)
84
101
  speedracer.process_internally(event)
@@ -8,12 +8,8 @@ module Contrast
8
8
  module Api
9
9
  module Communication
10
10
  # Handles processing deferred messages sent to SpeedRacer.
11
- #
12
- # @attr_reader last_app_update_ms [Integer] the time, in ms, that application settings last changed
13
- # @attr_reader last_server_update_ms [Integer] the time, in ms, that server settings last changed
14
11
  class ResponseProcessor
15
12
  include Contrast::Components::Logger::InstanceMethods
16
- attr_reader :last_app_update_ms, :last_server_update_ms
17
13
 
18
14
  # Use the given response to update the Agent's server features and application settings, allowing it to reflect
19
15
  # the latest options configured by the user in TeamServer
@@ -48,7 +44,6 @@ module Contrast
48
44
  logger.trace('Agent: Received updated server features')
49
45
 
50
46
  ::Contrast::SETTINGS.update_from_server_features(server_features)
51
- @last_server_update_ms = Contrast::Utils::Timer.now_ms
52
47
  server_features
53
48
  end
54
49
 
@@ -58,22 +53,24 @@ module Contrast
58
53
  # @param response [Contrast::Api::Settings::AgentSettings]
59
54
  # @return [Contrast::Api::Settings::ApplicationSettings]
60
55
  def process_application_response response
56
+ logger.debug('[!] process_application_response', response: response)
61
57
  app_settings = response&.application_settings
62
58
  return unless app_settings
63
59
 
64
- logger.debug('Agent: Received updated application settings')
65
-
60
+ logger.debug('[!] Agent: Received updated application settings', settings: app_settings)
66
61
  ::Contrast::SETTINGS.update_from_application_settings(app_settings)
67
- @last_app_update_ms = Contrast::Utils::Timer.now_ms
68
62
  app_settings
69
63
  end
70
64
 
71
65
  # This can't go in the Settings component because protect and assess depend on settings
72
66
  # I don't think it should go into contrast_service because that only handles connection specific data.
73
67
  #
74
- # @param server_features [Contrast::Api::Settings::AgentSettings, Array]
75
- # @param app_settings [Contrast::Api::Settings::ApplicationSettings, Array]
68
+ # @param server_features
69
+ # [Contrast::Api::Settings::AgentSettings, Contrast::Agent::Reporting::Settings::FeatureSettings]
70
+ # @param app_settings
71
+ # [Contrast::Api::Settings::ApplicationSettings, Contrast::Agent::Reporting::Settings::ApplicationSettings]
76
72
  def update_features server_features, app_settings
73
+ logger.info('Updating features')
77
74
  return unless !!(server_features || app_settings)
78
75
  return unless ::Contrast::AGENT.enabled?
79
76
 
@@ -55,7 +55,7 @@ module Contrast
55
55
  def spawn_service
56
56
  options = determine_startup_options
57
57
  logger.debug('Spawning service')
58
- spawn 'contrast_service', options
58
+ spawn('contrast_service', options)
59
59
  end
60
60
 
61
61
  # Create a thread to start the SpeedRacer, making calls to spawn until one starts successfully. As soon as the
@@ -35,7 +35,7 @@ module Contrast
35
35
 
36
36
  # Override this method to return a socket. Should be interface compatible with TCPSocket, UNIXSocket, etc.
37
37
  def new_socket
38
- raise NoMethodError, 'This is abstract, override it.'
38
+ raise(NoMethodError, 'This is abstract, override it.')
39
39
  end
40
40
  end
41
41
  end
@@ -114,7 +114,7 @@ module Contrast
114
114
  rescue StandardError => e
115
115
  logger.error('Sending failed for message.', e, msg_id: msg.__id__, p_id: msg.pid,
116
116
  msg_count: msg.message_count, response_id: response&.__id__)
117
- raise e # reraise to let SpeedRacer manage the connection
117
+ raise(e) # reraise to let SpeedRacer manage the connection
118
118
  end
119
119
 
120
120
  # Send the marshaled Contrast::Api::Dtm::Message across the socket used to talk to SpeedRacer
@@ -42,7 +42,7 @@ module Contrast
42
42
  return
43
43
  end
44
44
  end
45
- unless status.startup_messages_sent?
45
+ unless status.startup_messages_sent? || Contrast::CONTRAST_SERVICE.unnecessary?
46
46
  startup_responses = send_initialization_messages
47
47
  return false unless startup_responses
48
48
 
@@ -87,9 +87,9 @@ module Contrast
87
87
  ensure_startup!
88
88
 
89
89
  logger.debug_with_time(event.cs__class.cs__name) do
90
- response = socket_client.send_one event
90
+ response = socket_client.send_one(event)
91
91
  status.success!
92
- yield response
92
+ yield(response)
93
93
  end
94
94
  rescue StandardError => e
95
95
  status.failure!
@@ -0,0 +1,33 @@
1
+ # Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
2
+ # frozen_string_literal: true
3
+
4
+ require 'contrast/utils/string_utils'
5
+
6
+ module Contrast
7
+ module Api
8
+ module Decorators
9
+ # Used to decorate the {Contrast::Api::Dtm::Activity} protobuf model
10
+ # to handle conversion between framework route classes and the dtm.
11
+ module Activity
12
+ def self.included klass
13
+ klass.extend(ClassMethods)
14
+ end
15
+
16
+ # Class methods for Activity
17
+ module ClassMethods
18
+ def source_or_string obj
19
+ if obj.cs__is_a?(Regexp)
20
+ obj.source
21
+ elsif obj.cs__respond_to?(:safe_string)
22
+ obj.safe_string
23
+ else
24
+ obj.to_s
25
+ end
26
+ end
27
+ end
28
+ end
29
+ end
30
+ end
31
+ end
32
+
33
+ Contrast::Api::Dtm::Activity.include(Contrast::Api::Decorators::Activity)