ddtrace 1.5.0 → 1.5.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (28) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +43 -1
  3. data/LICENSE-3rdparty.csv +1 -0
  4. data/lib/datadog/appsec/assets/waf_rules/recommended.json +1169 -275
  5. data/lib/datadog/appsec/assets/waf_rules/risky.json +78 -78
  6. data/lib/datadog/appsec/assets/waf_rules/strict.json +278 -88
  7. data/lib/datadog/appsec/contrib/rack/gateway/watcher.rb +25 -18
  8. data/lib/datadog/appsec/contrib/rack/reactive/request.rb +11 -11
  9. data/lib/datadog/appsec/contrib/rack/reactive/request_body.rb +11 -11
  10. data/lib/datadog/appsec/contrib/rack/reactive/response.rb +11 -11
  11. data/lib/datadog/appsec/contrib/rack/request.rb +3 -0
  12. data/lib/datadog/appsec/contrib/rack/request_middleware.rb +42 -19
  13. data/lib/datadog/appsec/contrib/rails/gateway/watcher.rb +7 -6
  14. data/lib/datadog/appsec/contrib/rails/reactive/action.rb +11 -11
  15. data/lib/datadog/appsec/contrib/rails/request.rb +3 -0
  16. data/lib/datadog/appsec/contrib/sinatra/gateway/watcher.rb +14 -12
  17. data/lib/datadog/appsec/contrib/sinatra/reactive/routed.rb +11 -11
  18. data/lib/datadog/appsec/event.rb +2 -12
  19. data/lib/datadog/appsec/instrumentation/gateway.rb +16 -2
  20. data/lib/datadog/appsec/processor.rb +18 -2
  21. data/lib/datadog/core/configuration/settings.rb +19 -5
  22. data/lib/datadog/tracing/client_ip.rb +11 -0
  23. data/lib/datadog/tracing/configuration/ext.rb +2 -1
  24. data/lib/datadog/tracing/contrib/rack/middlewares.rb +3 -1
  25. data/lib/datadog/tracing/contrib/utils/quantization/http.rb +14 -6
  26. data/lib/ddtrace/transport/traces.rb +2 -0
  27. data/lib/ddtrace/version.rb +1 -1
  28. metadata +3 -3
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 480825e1e52697f2e7b49f605a733b2e53072b36aac74b664c62fada4e6acac2
4
- data.tar.gz: 288731a19cf08d4fb6d546ef3481a6a571823de993df97d5e5b14ff4cfc3b820
3
+ metadata.gz: 5417d6aa2797b38bfe55167afa723cb2479bd3b7fae3ad3ee16020844084a48e
4
+ data.tar.gz: 3c63a3c9dcce6c180349814da8113ba8e9b6b3334f2a4ab13ceeef4cc006c70c
5
5
  SHA512:
6
- metadata.gz: 902874e4c974a680373aa6c6ecf0b40a21bb285c266dd340e5d89c92827375e5e3c6480cc7988719a54eaa8e5e3829ddbb914afc84179e53d99fa1dff50759ad
7
- data.tar.gz: 890b97da4ceda1d07358b3a019a23ce0d224410359ea30f9128050c1de3a05ce077bd4592517b0606323215a6dac9b306bde38efddf69e742c6b324f52c239e7
6
+ metadata.gz: e82cadb7da0c30c4f22791fab2f1ef356cf33378756673a74fa2dbcf447a25530421f86d809a86dcab5ccd31d332bca5759a589e9dfdaebc47d3b3d8f201c662
7
+ data.tar.gz: b36eafe691e5808bc179e693549e7aa7747d400502d0d21f500dac0129c726a4b433498c6b41896fd3351a382ddede220540d8c0a14b12bf240d320d037ae786
data/CHANGELOG.md CHANGED
@@ -2,6 +2,36 @@
2
2
 
3
3
  ## [Unreleased]
4
4
 
5
+ ## [1.5.2] - 2022-10-27
6
+
7
+ ### Deprecation notice
8
+
9
+ - `DD_TRACE_CLIENT_IP_HEADER_DISABLED` was changed to `DD_TRACE_CLIENT_IP_ENABLED`. Although the former still works we encourage usage of the latter instead.
10
+
11
+ ### Changed
12
+
13
+ - `http.client_ip` tag collection is made opt-in for APM. Note that `http.client_ip` is always collected when ASM is enabled as part of the security service provided ([#2321][], [#2331][])
14
+
15
+ ### Fixed
16
+
17
+ - Handle REQUEST_URI with base url ([#2328][], [#2330][])
18
+
19
+ ## [1.5.1] - 2022-10-19
20
+
21
+ ### Changed
22
+
23
+ * Update libddwaf to 1.5.1 ([#2306][])
24
+ * Improve libddwaf extension memory management ([#2306][])
25
+
26
+ ### Fixed
27
+
28
+ * Fix `URI::InvalidURIError` ([#2310][], [#2318][]) ([@yujideveloper][])
29
+ * Handle URLs with invalid characters ([#2311][], [#2319][])
30
+ * Fix missing appsec.event tag ([#2306][])
31
+ * Fix missing Rack and Rails request body parsing for AppSec analysis ([#2306][])
32
+ * Fix unneeded AppSec call in a Rack context when AppSec is disabled ([#2306][])
33
+ * Fix spurious AppSec instrumentation ([#2306][])
34
+
5
35
  ## [1.5.0] - 2022-09-29
6
36
 
7
37
  ### Deprecation notice
@@ -2129,7 +2159,9 @@ Release notes: https://github.com/DataDog/dd-trace-rb/releases/tag/v0.3.1
2129
2159
 
2130
2160
  Git diff: https://github.com/DataDog/dd-trace-rb/compare/v0.3.0...v0.3.1
2131
2161
 
2132
- [Unreleased]: https://github.com/DataDog/dd-trace-rb/compare/v1.4.2...master
2162
+ [Unreleased]: https://github.com/DataDog/dd-trace-rb/compare/v1.5.2...master
2163
+ [1.5.2]: https://github.com/DataDog/dd-trace-rb/compare/v1.5.1...v1.5.2
2164
+ [1.5.1]: https://github.com/DataDog/dd-trace-rb/compare/v1.5.0...v1.5.1
2133
2165
  [1.5.0]: https://github.com/DataDog/dd-trace-rb/compare/v1.4.2...v1.5.0
2134
2166
  [1.4.1]: https://github.com/DataDog/dd-trace-rb/compare/v1.4.1...v1.4.2
2135
2167
  [1.4.1]: https://github.com/DataDog/dd-trace-rb/compare/v1.4.0...v1.4.1
@@ -3030,6 +3062,15 @@ Git diff: https://github.com/DataDog/dd-trace-rb/compare/v0.3.0...v0.3.1
3030
3062
  [#2289]: https://github.com/DataDog/dd-trace-rb/issues/2289
3031
3063
  [#2293]: https://github.com/DataDog/dd-trace-rb/issues/2293
3032
3064
  [#2296]: https://github.com/DataDog/dd-trace-rb/issues/2296
3065
+ [#2306]: https://github.com/DataDog/dd-trace-rb/issues/2306
3066
+ [#2310]: https://github.com/DataDog/dd-trace-rb/issues/2310
3067
+ [#2311]: https://github.com/DataDog/dd-trace-rb/issues/2311
3068
+ [#2318]: https://github.com/DataDog/dd-trace-rb/issues/2318
3069
+ [#2319]: https://github.com/DataDog/dd-trace-rb/issues/2319
3070
+ [#2321]: https://github.com/DataDog/dd-trace-rb/issues/2321
3071
+ [#2328]: https://github.com/DataDog/dd-trace-rb/issues/2328
3072
+ [#2330]: https://github.com/DataDog/dd-trace-rb/issues/2330
3073
+ [#2331]: https://github.com/DataDog/dd-trace-rb/issues/2331
3033
3074
  [@AdrianLC]: https://github.com/AdrianLC
3034
3075
  [@Azure7111]: https://github.com/Azure7111
3035
3076
  [@BabyGroot]: https://github.com/BabyGroot
@@ -3171,5 +3212,6 @@ Git diff: https://github.com/DataDog/dd-trace-rb/compare/v0.3.0...v0.3.1
3171
3212
  [@vramaiah]: https://github.com/vramaiah
3172
3213
  [@walterking]: https://github.com/walterking
3173
3214
  [@y-yagi]: https://github.com/y-yagi
3215
+ [@yujideveloper]: https://github.com/yujideveloper
3174
3216
  [@yukimurasawa]: https://github.com/yukimurasawa
3175
3217
  [@zachmccormick]: https://github.com/zachmccormick
data/LICENSE-3rdparty.csv CHANGED
@@ -1,6 +1,7 @@
1
1
  Component,Origin,License,Copyright
2
2
  lib/datadog/core/vendor/multipart-post,https://github.com/socketry/multipart-post,MIT,"Copyright (c) 2007-2013 Nick Sieger."
3
3
  lib/datadog/tracing/contrib/active_record/vendor,https://github.com/rails/rails/,MIT,"Copyright (c) 2005-2018 David Heinemeier Hansson"
4
+ lib/datadog/tracing/contrib/utils/quantization/http.rb,https://github.com/ruby/uri,BSD-2-Clause,"Copyright (C) 1993-2013 Yukihiro Matsumoto. All rights reserved."
4
5
  ext/ddtrace_profiling_native_extension/private_vm_api_access,https://github.com/ruby/ruby,BSD-2-Clause,"Copyright (C) 1993-2013 Yukihiro Matsumoto. All rights reserved."
5
6
  msgpack,https://rubygems.org/gems/msgpack,Apache-2.0,"Copyright (c) 2008-2015 Sadayuki Furuhashi"
6
7
  debase-ruby_core_source,https://rubygems.org/gems/debase-ruby_core_source,MIT for gem and BSD-2-Clause for Ruby sources,"Copyright (c) 2012 Gabriel Horner. Files from Ruby sources are Copyright (C) 1993-2013 Yukihiro Matsumoto. All rights reserved."