ddtrace 1.5.0 → 1.5.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (26) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +24 -1
  3. data/LICENSE-3rdparty.csv +1 -0
  4. data/lib/datadog/appsec/assets/waf_rules/recommended.json +1169 -275
  5. data/lib/datadog/appsec/assets/waf_rules/risky.json +78 -78
  6. data/lib/datadog/appsec/assets/waf_rules/strict.json +278 -88
  7. data/lib/datadog/appsec/contrib/rack/gateway/watcher.rb +25 -18
  8. data/lib/datadog/appsec/contrib/rack/reactive/request.rb +11 -11
  9. data/lib/datadog/appsec/contrib/rack/reactive/request_body.rb +11 -11
  10. data/lib/datadog/appsec/contrib/rack/reactive/response.rb +11 -11
  11. data/lib/datadog/appsec/contrib/rack/request.rb +3 -0
  12. data/lib/datadog/appsec/contrib/rack/request_middleware.rb +2 -1
  13. data/lib/datadog/appsec/contrib/rails/gateway/watcher.rb +7 -6
  14. data/lib/datadog/appsec/contrib/rails/reactive/action.rb +11 -11
  15. data/lib/datadog/appsec/contrib/rails/request.rb +3 -0
  16. data/lib/datadog/appsec/contrib/sinatra/gateway/watcher.rb +14 -12
  17. data/lib/datadog/appsec/contrib/sinatra/reactive/routed.rb +11 -11
  18. data/lib/datadog/appsec/event.rb +0 -8
  19. data/lib/datadog/appsec/instrumentation/gateway.rb +16 -2
  20. data/lib/datadog/appsec/processor.rb +18 -2
  21. data/lib/datadog/core/configuration/settings.rb +2 -2
  22. data/lib/datadog/tracing/contrib/rack/middlewares.rb +1 -1
  23. data/lib/datadog/tracing/contrib/utils/quantization/http.rb +14 -6
  24. data/lib/ddtrace/transport/traces.rb +2 -0
  25. data/lib/ddtrace/version.rb +1 -1
  26. metadata +3 -3
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 480825e1e52697f2e7b49f605a733b2e53072b36aac74b664c62fada4e6acac2
4
- data.tar.gz: 288731a19cf08d4fb6d546ef3481a6a571823de993df97d5e5b14ff4cfc3b820
3
+ metadata.gz: 256de6fe7c7925b1ba61dcd0e07720c2c791c2938f4f286236ee03f9977e8781
4
+ data.tar.gz: 1dcc87d9a9bfb1b3b534d20132d999a99018f65898f5563e63cebdedd24c6575
5
5
  SHA512:
6
- metadata.gz: 902874e4c974a680373aa6c6ecf0b40a21bb285c266dd340e5d89c92827375e5e3c6480cc7988719a54eaa8e5e3829ddbb914afc84179e53d99fa1dff50759ad
7
- data.tar.gz: 890b97da4ceda1d07358b3a019a23ce0d224410359ea30f9128050c1de3a05ce077bd4592517b0606323215a6dac9b306bde38efddf69e742c6b324f52c239e7
6
+ metadata.gz: c81b5bb700bced32b5b87713c19efdd6e2b14ea43034f83dc24b74d65318c3cc995f42beb601142b7242cc2eb8c470314d932b567d73acfa098dd89964d15211
7
+ data.tar.gz: 48dab08b732e59e87d559026e580a2288e2b10284dbc1550a0c482d19f88a9707103b02b1ca7579604619def1c5b4d30822e5830e75311f98ee157d3d302e9d6
data/CHANGELOG.md CHANGED
@@ -2,6 +2,22 @@
2
2
 
3
3
  ## [Unreleased]
4
4
 
5
+ ## [1.5.1] - 2022-10-19
6
+
7
+ ### Changed
8
+
9
+ * Update libddwaf to 1.5.1 ([#2306][])
10
+ * Improve libddwaf extension memory management ([#2306][])
11
+
12
+ ### Fixed
13
+
14
+ * Fix `URI::InvalidURIError` ([#2310][], [#2318][]) ([@yujideveloper][])
15
+ * Handle URLs with invalid characters ([#2311][], [#2319][])
16
+ * Fix missing appsec.event tag ([#2306][])
17
+ * Fix missing Rack and Rails request body parsing for AppSec analysis ([#2306][])
18
+ * Fix unneeded AppSec call in a Rack context when AppSec is disabled ([#2306][])
19
+ * Fix spurious AppSec instrumentation ([#2306][])
20
+
5
21
  ## [1.5.0] - 2022-09-29
6
22
 
7
23
  ### Deprecation notice
@@ -2129,7 +2145,8 @@ Release notes: https://github.com/DataDog/dd-trace-rb/releases/tag/v0.3.1
2129
2145
 
2130
2146
  Git diff: https://github.com/DataDog/dd-trace-rb/compare/v0.3.0...v0.3.1
2131
2147
 
2132
- [Unreleased]: https://github.com/DataDog/dd-trace-rb/compare/v1.4.2...master
2148
+ [Unreleased]: https://github.com/DataDog/dd-trace-rb/compare/v1.5.1...master
2149
+ [1.5.1]: https://github.com/DataDog/dd-trace-rb/compare/v1.5.0...v1.5.1
2133
2150
  [1.5.0]: https://github.com/DataDog/dd-trace-rb/compare/v1.4.2...v1.5.0
2134
2151
  [1.4.1]: https://github.com/DataDog/dd-trace-rb/compare/v1.4.1...v1.4.2
2135
2152
  [1.4.1]: https://github.com/DataDog/dd-trace-rb/compare/v1.4.0...v1.4.1
@@ -3030,6 +3047,11 @@ Git diff: https://github.com/DataDog/dd-trace-rb/compare/v0.3.0...v0.3.1
3030
3047
  [#2289]: https://github.com/DataDog/dd-trace-rb/issues/2289
3031
3048
  [#2293]: https://github.com/DataDog/dd-trace-rb/issues/2293
3032
3049
  [#2296]: https://github.com/DataDog/dd-trace-rb/issues/2296
3050
+ [#2306]: https://github.com/DataDog/dd-trace-rb/issues/2306
3051
+ [#2310]: https://github.com/DataDog/dd-trace-rb/issues/2310
3052
+ [#2311]: https://github.com/DataDog/dd-trace-rb/issues/2311
3053
+ [#2318]: https://github.com/DataDog/dd-trace-rb/issues/2318
3054
+ [#2319]: https://github.com/DataDog/dd-trace-rb/issues/2319
3033
3055
  [@AdrianLC]: https://github.com/AdrianLC
3034
3056
  [@Azure7111]: https://github.com/Azure7111
3035
3057
  [@BabyGroot]: https://github.com/BabyGroot
@@ -3171,5 +3193,6 @@ Git diff: https://github.com/DataDog/dd-trace-rb/compare/v0.3.0...v0.3.1
3171
3193
  [@vramaiah]: https://github.com/vramaiah
3172
3194
  [@walterking]: https://github.com/walterking
3173
3195
  [@y-yagi]: https://github.com/y-yagi
3196
+ [@yujideveloper]: https://github.com/yujideveloper
3174
3197
  [@yukimurasawa]: https://github.com/yukimurasawa
3175
3198
  [@zachmccormick]: https://github.com/zachmccormick
data/LICENSE-3rdparty.csv CHANGED
@@ -1,6 +1,7 @@
1
1
  Component,Origin,License,Copyright
2
2
  lib/datadog/core/vendor/multipart-post,https://github.com/socketry/multipart-post,MIT,"Copyright (c) 2007-2013 Nick Sieger."
3
3
  lib/datadog/tracing/contrib/active_record/vendor,https://github.com/rails/rails/,MIT,"Copyright (c) 2005-2018 David Heinemeier Hansson"
4
+ lib/datadog/tracing/contrib/utils/quantization/http.rb,https://github.com/ruby/uri,BSD-2-Clause,"Copyright (C) 1993-2013 Yukihiro Matsumoto. All rights reserved."
4
5
  ext/ddtrace_profiling_native_extension/private_vm_api_access,https://github.com/ruby/ruby,BSD-2-Clause,"Copyright (C) 1993-2013 Yukihiro Matsumoto. All rights reserved."
5
6
  msgpack,https://rubygems.org/gems/msgpack,Apache-2.0,"Copyright (c) 2008-2015 Sadayuki Furuhashi"
6
7
  debase-ruby_core_source,https://rubygems.org/gems/debase-ruby_core_source,MIT for gem and BSD-2-Clause for Ruby sources,"Copyright (c) 2012 Gabriel Horner. Files from Ruby sources are Copyright (C) 1993-2013 Yukihiro Matsumoto. All rights reserved."