contrast-agent 6.7.0 → 6.8.0

data/lib/contrast/api/decorators/user_input.rb

@@ -1,51 +0,0 @@
-# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
-# frozen_string_literal: true
-
-require 'contrast/utils/string_utils'
-require 'contrast/utils/assess/tracking_util'
-require 'base64'
-
-module Contrast
-  module Api
-    module Decorators
-      # Used to decorate the {Contrast::Api::Dtm::UserInput} protobuf model.
-      module UserInput
-        UNKNOWN_USER_INPUT = Contrast::Api::Dtm::UserInput.new.tap do |user_input|
-          user_input.input_type = :UNKNOWN
-        end
-        UNKNOWN_USER_INPUT.cs__freeze
-
-        def self.included klass
-          klass.extend(ClassMethods)
-        end
-
-        # Used to add class methods to UserInput
-        module ClassMethods
-          def build_from_ia_result ia_result
-            return UNKNOWN_USER_INPUT.dup unless ia_result
-
-            user_input = new
-            user_input.matcher_ids = ia_result.ids
-            user_input.path = ia_result.path.to_s
-            user_input.key = ia_result.key.to_s
-            user_input.value = ia_result.value.to_s
-            if ia_result.input_type
-              #
-              # InputAnalysis have local Agent implementation, so we need ot take care of difference
-              # if we pass data from wrong place - we need to handle the TypeError in throws
-              begin
-                user_input.input_type = ia_result.input_type.to_i
-              rescue TypeError, NoMethodError => _e
-                user_input.input_type = ia_result.input_type
-              end
-            end
-
-            user_input
-          end
-        end
-      end
-    end
-  end
-end
-
-Contrast::Api::Dtm::UserInput.include(Contrast::Api::Decorators::UserInput)

data/lib/contrast/api/decorators/virtual_patch.rb

@@ -1,34 +0,0 @@
-# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
-# frozen_string_literal: true
-
-require 'contrast/api/dtm.pb'
-require 'contrast/utils/string_utils'
-require 'contrast/components/base'
-
-module Contrast
-  module Api
-    module Decorators
-      # Used to decorate the {Contrast::Api::Dtm::VirtualPatchDetails} protobuf
-      # model so it can own the request which its data is for.
-      module VirtualPatchDetails
-        def self.included klass
-          klass.extend(ClassMethods)
-        end
-
-        # Used to add class methods to the AgentStartup class on inclusion of the decorator
-        module ClassMethods
-          def build
-            new
-          end
-
-          # @param result [Contrast::Api::Dtm::VirtualPatchDetails]
-          def to_controlled_hash result
-            { uuid: result.uuid }
-          end
-        end
-      end
-    end
-  end
-end
-
-Contrast::Api::Dtm::VirtualPatchDetails.include(Contrast::Api::Decorators::VirtualPatchDetails)

data/lib/contrast/api/decorators.rb

@@ -1,22 +0,0 @@
-# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
-# frozen_string_literal: true
-
-module Contrast
-  module Api
-    # Used to decorate protobuf models
-    module Decorators
-    end
-  end
-end
-
-require 'contrast/api/decorators/message'
-require 'contrast/api/decorators/agent_startup'
-require 'contrast/api/decorators/application_startup'
-require 'contrast/api/decorators/input_analysis'
-require 'contrast/api/decorators/application_settings'
-require 'contrast/api/decorators/server_features'
-require 'contrast/api/decorators/rasp_rule_sample'
-require 'contrast/api/decorators/user_input'
-require 'contrast/api/decorators/address'
-require 'contrast/api/decorators/http_request'
-require 'contrast/api/decorators/response_type'

data/lib/contrast/api/dtm.pb.rb

@@ -1,363 +0,0 @@
-# encoding: utf-8
-
-##
-# This file is auto-generated. DO NOT EDIT!
-#
-require 'protobuf'
-
-module Contrast
-  module Api
-    module Dtm
-      ::Protobuf::Optionable.inject(self) { ::CSGoogle::Protobuf::FileOptions }
-
-      ##
-      # Message Classes
-      #
-      class Message < ::Protobuf::Message; end
-      class Poll < ::Protobuf::Message; end
-
-      class AgentStartup < ::Protobuf::Message; end
-      class ApplicationCreate < ::Protobuf::Message; end
-      class InstrumentationMode < ::Protobuf::Message; end
-
-      class Address < ::Protobuf::Message; end
-      class HttpRequest < ::Protobuf::Message
-        class Authentication < ::Protobuf::Enum
-          define :UNAUTHENTICATED, 0
-          define :AUTHENTICATED, 1
-          define :LOGIN_FAIL, 2
-          define :LOGIN_SUCCESS, 3
-          define :LOGIN_UNKNOWN, 4
-        end
-
-        class DocumentType < ::Protobuf::Enum
-          define :NORMAL, 0
-          define :JSON, 1
-          define :XML, 2
-        end
-
-      end
-
-      class SimplePair < ::Protobuf::Message; end
-      class Pair < ::Protobuf::Message; end
-      class AttackResult < ::Protobuf::Message
-        class ResponseType < ::Protobuf::Enum
-          define :NO_ACTION, 0
-          define :BLOCKED, 1
-          define :MONITORED, 2
-          define :PROBED, 3
-          define :BLOCKED_AT_PERIMETER, 4
-          define :AGGREGATED, 5
-        end
-
-      end
-
-      class RaspRuleSample < ::Protobuf::Message; end
-
-      class BotBlockerDetails < ::Protobuf::Message; end
-      class CmdInjectionDetails < ::Protobuf::Message; end
-
-      class HttpMethodTamperingDetails < ::Protobuf::Message; end
-      class UntrustedDeserializationDetails < ::Protobuf::Message; end
-      class IpDenylistDetails < ::Protobuf::Message; end
-      class PathTraversalDetails < ::Protobuf::Message; end
-      class PathTraversalSemanticAnalysisDetails < ::Protobuf::Message
-        class Finding < ::Protobuf::Enum
-          define :CUSTOM_CODE_ACCESSING_SYSTEM_FILES, 0
-          define :COMMON_FILE_EXPLOITS, 1
-        end
-
-      end
-
-      class ReDosDetails < ::Protobuf::Message; end
-      class SqlInjectionDetails < ::Protobuf::Message; end
-
-      class NoSqlInjectionDetails < ::Protobuf::Message; end
-      class SsrfDetails < ::Protobuf::Message; end
-      class VirtualPatchDetails < ::Protobuf::Message; end
-      class XssDetails < ::Protobuf::Message; end
-      class XssMatch < ::Protobuf::Message; end
-      class XxeDetails < ::Protobuf::Message; end
-      class XxeMatch < ::Protobuf::Message; end
-      class XxeWrapper < ::Protobuf::Message; end
-      class UserInput < ::Protobuf::Message
-        class InputType < ::Protobuf::Enum
-          define :UNDEFINED_TYPE, 0
-          define :BODY, 1
-          define :COOKIE_NAME, 2
-          define :COOKIE_VALUE, 3
-          define :HEADER, 4
-          define :PARAMETER_NAME, 5
-          define :PARAMETER_VALUE, 6
-          define :QUERYSTRING, 7
-          define :URI, 8
-          define :SOCKET, 9
-          define :JSON_VALUE, 10
-          define :JSON_ARRAYED_VALUE, 11
-          define :MULTIPART_CONTENT_TYPE, 16
-          define :MULTIPART_VALUE, 17
-          define :MULTIPART_FIELD_NAME, 18
-          define :MULTIPART_NAME, 19
-          define :XML_VALUE, 20
-          define :DWR_VALUE, 21
-          define :METHOD, 22
-          define :REQUEST, 23
-          define :URL_PARAMETER, 24
-          define :UNKNOWN, 99
-        end
-
-      end
-
-      class StackTraceElement < ::Protobuf::Message; end
-
-      ##
-      # File Options
-      #
-      set_option :go_package, "bitbucket.org/contrastsecurity/go-speedracer-go/from_agent"
-
-
-      ##
-      # Message Fields
-      #
-      class Message
-        optional :string, :client_id, 1
-        optional :int32, :client_number, 2, :deprecated => true
-        optional :int32, :client_total, 3, :deprecated => true
-        optional :int64, :pid, 8
-        optional :int64, :ppid, 9
-        optional :int32, :message_count, 4
-        optional :int64, :timestamp_ms, 5
-        optional :string, :app_name, 6
-        optional :string, :app_language, 7
-        optional :string, :app_path, 28
-        optional ::Contrast::Api::Dtm::AgentStartup, :agent_startup, 11
-        optional ::Contrast::Api::Dtm::ApplicationCreate, :application_create, 12
-        optional ::Contrast::Api::Dtm::HttpRequest, :prefilter, 20
-        optional ::Contrast::Api::Dtm::Poll, :poll, 27
-      end
-
-      class AgentStartup
-        optional :string, :version, 2, :deprecated => true
-        optional :string, :environment, 3
-        optional :string, :tags, 4, :deprecated => true
-        optional :string, :server_name, 5
-        optional :string, :server_path, 6
-        optional :string, :server_type, 7
-        optional :string, :server_version, 8
-        optional :int32, :heartbeat_ms, 9
-        optional :string, :server_tags, 10
-        optional :string, :application_tags, 11
-        optional :string, :library_tags, 12
-        optional :string, :finding_tags, 13
-        optional :string, :agent_version, 14
-      end
-
-      class ApplicationCreate
-        optional :string, :group, 1
-        optional :string, :app_version, 2
-        optional :string, :tags, 3, :deprecated => true
-        optional :string, :code, 4
-        optional :string, :metadata, 5
-        optional :string, :session_id, 6
-        optional :string, :session_metadata, 7
-        optional ::Contrast::Api::Dtm::InstrumentationMode, :mode, 10
-      end
-
-      class InstrumentationMode
-        optional :bool, :protect, 1
-        optional :bool, :assess, 2
-      end
-
-      class Address
-        optional :string, :ip, 1
-        optional :string, :host, 2
-        optional :int32, :port, 3
-      end
-
-      class HttpRequest
-        optional :string, :uuid, 1
-        optional :int64, :timestamp_ms, 2
-        optional ::Contrast::Api::Dtm::Address, :sender, 3
-        optional ::Contrast::Api::Dtm::Address, :receiver, 4
-        optional :string, :protocol, 5
-        optional :string, :version, 6
-        optional :string, :method, 7
-        optional :string, :raw, 8
-        optional :bool, :parsed_connection, 9
-        optional :string, :uri, 10
-        optional :string, :normalized_uri, 11
-        optional :string, :context, 12
-        optional :string, :path, 13
-        optional :string, :query_string, 14
-        map :string, ::Contrast::Api::Dtm::Pair, :normalized_request_params, 16
-        repeated ::Contrast::Api::Dtm::SimplePair, :multipart_headers, 51
-        map :string, :string, :request_headers, 20
-        optional :bool, :parsed_request_headers, 21
-        map :string, ::Contrast::Api::Dtm::Pair, :normalized_request_headers, 22, :deprecated => true
-        map :string, ::Contrast::Api::Dtm::Pair, :normalized_cookies, 23
-        optional :string, :request_body, 30, :deprecated => true
-        optional :bool, :parsed_request_body, 31
-        optional ::Contrast::Api::Dtm::HttpRequest::DocumentType, :document_type, 32
-        optional :bytes, :request_body_binary, 33
-        optional ::Contrast::Api::Dtm::HttpRequest::Authentication, :authentication, 40
-        optional :string, :principal, 41
-        optional :string, :server_info, 50
-      end
-
-      class SimplePair
-        optional :string, :key, 1
-        optional :string, :value, 2
-      end
-
-      class Pair
-        optional :string, :key, 1
-        repeated :string, :values, 2
-      end
-
-      class AttackResult
-        optional ::Contrast::Api::Dtm::AttackResult::ResponseType, :response, 1
-        optional :string, :rule_id, 2
-        repeated ::Contrast::Api::Dtm::RaspRuleSample, :samples, 6
-        optional :string, :tags, 7, :deprecated => true
-        optional :int64, :acc_updated_ms, 16
-        optional :int32, :acc_limit, 17
-        optional :int64, :acc_window_ms, 18
-        optional :int32, :acc_count, 19
-        optional :string, :acc_mode, 21
-        optional :string, :acc_msg, 22
-      end
-
-      class RaspRuleSample
-        optional :int64, :timestamp_ms, 2
-        repeated ::Contrast::Api::Dtm::StackTraceElement, :stack_trace_elements, 4
-        optional ::Contrast::Api::Dtm::UserInput, :user_input, 5
-        optional ::Contrast::Api::Dtm::BotBlockerDetails, :bot_blocker, 17
-        optional ::Contrast::Api::Dtm::CmdInjectionDetails, :cmdi, 18
-        optional ::Contrast::Api::Dtm::UntrustedDeserializationDetails, :untrusted_deserialization, 21
-        optional ::Contrast::Api::Dtm::IpDenylistDetails, :ip_denylist, 45
-        optional ::Contrast::Api::Dtm::PathTraversalDetails, :path_traversal, 26
-        optional ::Contrast::Api::Dtm::ReDosDetails, :re_dos, 27
-        optional ::Contrast::Api::Dtm::SqlInjectionDetails, :sqli, 28
-        optional ::Contrast::Api::Dtm::SsrfDetails, :ssrf, 29
-        optional ::Contrast::Api::Dtm::VirtualPatchDetails, :virtual_patch, 30
-        optional ::Contrast::Api::Dtm::XssDetails, :xss, 31
-        optional ::Contrast::Api::Dtm::XxeDetails, :xxe, 32
-        optional ::Contrast::Api::Dtm::NoSqlInjectionDetails, :no_sqli, 33
-        optional ::Contrast::Api::Dtm::HttpMethodTamperingDetails, :method_tampering, 34
-        optional ::Contrast::Api::Dtm::PathTraversalSemanticAnalysisDetails, :path_traversal_semantic, 43
-      end
-
-      class BotBlockerDetails
-        optional :string, :bot, 1
-        optional :string, :user_agent, 2
-      end
-
-      class CmdInjectionDetails
-        optional :string, :command, 1
-        optional :int32, :start_idx, 2
-        optional :int32, :end_idx, 3
-      end
-
-      class HttpMethodTamperingDetails
-        optional :string, :method, 1
-        optional :int32, :response_code, 2
-      end
-
-      class UntrustedDeserializationDetails
-        optional :bool, :command, 1
-        optional :string, :deserializer, 2
-      end
-
-      class IpDenylistDetails
-        optional :string, :ip, 1
-        optional :string, :uuid, 2
-      end
-
-      class PathTraversalDetails
-        optional :string, :path, 1
-      end
-
-      class PathTraversalSemanticAnalysisDetails
-        optional :string, :path, 1
-        repeated ::Contrast::Api::Dtm::PathTraversalSemanticAnalysisDetails::Finding, :findings, 2
-      end
-
-      class ReDosDetails
-        optional :int32, :times_accessed, 1
-        optional :int64, :execution_time_ms, 2
-        optional :string, :pattern, 3
-        optional :string, :offending_string, 4
-      end
-
-      class SqlInjectionDetails
-        optional :int32, :start_idx, 1
-        optional :int32, :end_idx, 2
-        optional :int32, :boundary_overrun_idx, 3
-        optional :int32, :input_boundary_idx, 4
-        optional :string, :query, 5
-      end
-
-      class NoSqlInjectionDetails
-        optional :int32, :start_idx, 1
-        optional :int32, :end_idx, 2
-        optional :int32, :boundary_overrun_idx, 3
-        optional :int32, :input_boundary_idx, 4
-        optional :string, :query, 5
-      end
-
-      class SsrfDetails
-        optional :string, :url, 1
-      end
-
-      class VirtualPatchDetails
-        optional :string, :uuid, 1
-      end
-
-      class XssDetails
-        optional :string, :input, 1
-        repeated ::Contrast::Api::Dtm::XssMatch, :matches, 2
-      end
-
-      class XssMatch
-        optional :int64, :evidence_start_ms, 1
-        optional :string, :evidence, 2
-        optional :int32, :offset, 3
-      end
-
-      class XxeDetails
-        optional :string, :xml, 1
-        repeated ::Contrast::Api::Dtm::XxeMatch, :declared_entities, 2
-        repeated ::Contrast::Api::Dtm::XxeWrapper, :entities_resolved, 3
-      end
-
-      class XxeMatch
-        optional :int32, :start_idx, 1
-        optional :int32, :end_idx, 2
-      end
-
-      class XxeWrapper
-        optional :string, :system_id, 1
-        optional :string, :public_id, 2
-      end
-
-      class UserInput
-        optional :string, :path, 2
-        optional :string, :key, 3
-        optional :string, :value, 4
-        optional ::Contrast::Api::Dtm::UserInput::InputType, :input_type, 5
-        optional ::Contrast::Api::Dtm::HttpRequest::DocumentType, :document_type, 6
-        repeated :string, :matcher_ids, 7
-      end
-
-      class StackTraceElement
-        optional :string, :declaring_class, 1
-        optional :string, :method_name, 2
-        optional :string, :file_name, 3
-        optional :int32, :line_number, 4
-      end
-    end
-
-  end
-
-end
-