contrast-agent 6.6.4 → 6.8.0

data/lib/contrast/api/decorators/trace_event_signature.rb

@@ -1,69 +0,0 @@
-# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
-# frozen_string_literal: true
-
-require 'contrast/utils/string_utils'
-require 'contrast/utils/assess/tracking_util'
-require 'base64'
-
-module Contrast
-  module Api
-    module Decorators
-      # Used to decorate the {Contrast::Api::Dtm::TraceEventSignature} protobuf
-      # model.
-      module TraceEventSignature
-        def self.included klass
-          klass.extend(ClassMethods)
-        end
-
-        # Class methods for TraceEventSignature
-        module ClassMethods
-          # Convert the given composites into components that TeamServer can
-          # understand in order to build a representation of the method
-          # invoked.
-          #
-          # @param ret_obj [Contrast::Agent::Assess::ContrastObject, nil] the
-          #   return value of the method call.
-          # @param policy_node [Contrast::Agent::Assess::Policy::PolicyNode]
-          #   the policy which pertains to the method invoked.
-          # @param args [Array<Contrast::Agent::Assess::ContrastObject>, nil]
-          # @return [Contrast::Api::Dtm::TraceEventSignature]
-          def build ret_obj, policy_node, args
-            signature = new
-            signature.return_type = Contrast::Utils::StringUtils.force_utf8(type_name(ret_obj))
-            signature.class_name = Contrast::Utils::StringUtils.force_utf8(policy_node.class_name)
-            signature.method_name = Contrast::Utils::StringUtils.force_utf8(policy_node.method_name)
-            if args
-              args&.each do |arg|
-                signature.arg_types << Contrast::Utils::StringUtils.force_utf8(type_name(arg))
-              end
-            end
-            signature.constructor = policy_node.method_name == :new
-            # if there's a ret, then this method isn't nil. not 100% full proof since you can
-            # return nil, but this is the best we've got currently.
-            signature.void_method = ret_obj.nil? || ret_obj.object.nil?
-            # 8 is STATIC in Java... we have to placate them for now
-            # it has been requested that flags be removed since it isn't used
-            signature.flags = 8 unless policy_node.instance_method?
-            signature
-          end
-
-          private
-
-          # While Ruby signatures do not require neither a return type and can
-          # return anything depending on inputs, code paths, etc, nor constant
-          # parameter types, TeamServer was designed with strongly typed
-          # languages (Java) in mind, so we need types in our signatures.
-          #
-          # @param contrast_object [Contrast::Agent::Assess::ContrastObject, nil]
-          #   the object to find the type of
-          # @return [String] the name of the module of the ret_obj, or `nil`
-          def type_name contrast_object
-            contrast_object ? contrast_object.object_type : Contrast::Utils::ObjectShare::NIL_STRING
-          end
-        end
-      end
-    end
-  end
-end
-
-Contrast::Api::Dtm::TraceEventSignature.include(Contrast::Api::Decorators::TraceEventSignature)

data/lib/contrast/api/decorators/trace_taint_range.rb

@@ -1,52 +0,0 @@
-# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
-# frozen_string_literal: true
-
-require 'contrast/utils/object_share'
-require 'contrast/utils/string_utils'
-
-module Contrast
-  module Api
-    module Decorators
-      # Used to decorate the {Contrast::Api::Dtm::TraceTaintRange} protobuf
-      # model.
-      module TraceTaintRange
-        def self.included klass
-          klass.extend(ClassMethods)
-        end
-
-        # Class methods for TraceEventObject
-        module ClassMethods
-          # Convert the tags from Contrast::Agent::Assess::Property::Tagged to
-          # the form required for their Event's DTM.
-          #
-          # @param tags [Hash{String => Array<Contrast::Agent::Assess::Tag>}]
-          # @return [Array<Contrast::Api::Dtm::TraceTaintRange>]
-          def build_for_event tags
-            return Contrast::Utils::ObjectShare::EMPTY_ARRAY unless tags&.any?
-
-            ranges = []
-            tags.each_value do |value|
-              next if value.empty?
-
-              value.each { |tag| ranges << build(tag) }
-            end
-            ranges
-          end
-
-          # Convert our Tags to their DTM equivalent
-          #
-          # @param tag [Contrast::Agent::Assess::Tag]
-          # @return [Contrast::Api::Dtm::TraceTaintRange]
-          def build tag
-            range = Contrast::Api::Dtm::TraceTaintRange.new
-            range.tag = Contrast::Utils::StringUtils.protobuf_safe_string(tag.label)
-            range.range = tag.start_idx.to_s + Contrast::Utils::ObjectShare::COLON + tag.end_idx.to_s
-            range
-          end
-        end
-      end
-    end
-  end
-end
-
-Contrast::Api::Dtm::TraceTaintRange.include(Contrast::Api::Decorators::TraceTaintRange)

data/lib/contrast/api/decorators/user_input.rb

@@ -1,51 +0,0 @@
-# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
-# frozen_string_literal: true
-
-require 'contrast/utils/string_utils'
-require 'contrast/utils/assess/tracking_util'
-require 'base64'
-
-module Contrast
-  module Api
-    module Decorators
-      # Used to decorate the {Contrast::Api::Dtm::UserInput} protobuf model.
-      module UserInput
-        UNKNOWN_USER_INPUT = Contrast::Api::Dtm::UserInput.new.tap do |user_input|
-          user_input.input_type = :UNKNOWN
-        end
-        UNKNOWN_USER_INPUT.cs__freeze
-
-        def self.included klass
-          klass.extend(ClassMethods)
-        end
-
-        # Used to add class methods to UserInput
-        module ClassMethods
-          def build_from_ia_result ia_result
-            return UNKNOWN_USER_INPUT.dup unless ia_result
-
-            user_input = new
-            user_input.matcher_ids = ia_result.ids
-            user_input.path = ia_result.path.to_s
-            user_input.key = ia_result.key.to_s
-            user_input.value = ia_result.value.to_s
-            if ia_result.input_type
-              #
-              # InputAnalysis have local Agent implementation, so we need ot take care of difference
-              # if we pass data from wrong place - we need to handle the TypeError in throws
-              begin
-                user_input.input_type = ia_result.input_type.to_i
-              rescue TypeError, NoMethodError => _e
-                user_input.input_type = ia_result.input_type
-              end
-            end
-
-            user_input
-          end
-        end
-      end
-    end
-  end
-end
-
-Contrast::Api::Dtm::UserInput.include(Contrast::Api::Decorators::UserInput)

data/lib/contrast/api/decorators/virtual_patch.rb

@@ -1,34 +0,0 @@
-# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
-# frozen_string_literal: true
-
-require 'contrast/api/dtm.pb'
-require 'contrast/utils/string_utils'
-require 'contrast/components/base'
-
-module Contrast
-  module Api
-    module Decorators
-      # Used to decorate the {Contrast::Api::Dtm::VirtualPatchDetails} protobuf
-      # model so it can own the request which its data is for.
-      module VirtualPatchDetails
-        def self.included klass
-          klass.extend(ClassMethods)
-        end
-
-        # Used to add class methods to the AgentStartup class on inclusion of the decorator
-        module ClassMethods
-          def build
-            new
-          end
-
-          # @param result [Contrast::Api::Dtm::VirtualPatchDetails]
-          def to_controlled_hash result
-            { uuid: result.uuid }
-          end
-        end
-      end
-    end
-  end
-end
-
-Contrast::Api::Dtm::VirtualPatchDetails.include(Contrast::Api::Decorators::VirtualPatchDetails)

data/lib/contrast/api/decorators.rb

@@ -1,28 +0,0 @@
-# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
-# frozen_string_literal: true
-
-module Contrast
-  module Api
-    # Used to decorate protobuf models
-    module Decorators
-    end
-  end
-end
-
-require 'contrast/api/decorators/message'
-require 'contrast/api/decorators/agent_startup'
-require 'contrast/api/decorators/application_startup'
-require 'contrast/api/decorators/architecture_component'
-require 'contrast/api/decorators/input_analysis'
-require 'contrast/api/decorators/application_settings'
-require 'contrast/api/decorators/server_features'
-require 'contrast/api/decorators/route_coverage'
-require 'contrast/api/decorators/trace_event_object'
-require 'contrast/api/decorators/trace_event_signature'
-require 'contrast/api/decorators/trace_taint_range'
-require 'contrast/api/decorators/trace_event'
-require 'contrast/api/decorators/rasp_rule_sample'
-require 'contrast/api/decorators/user_input'
-require 'contrast/api/decorators/address'
-require 'contrast/api/decorators/http_request'
-require 'contrast/api/decorators/response_type'