newrelic_security 0.1.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (205) hide show
  1. checksums.yaml +7 -0
  2. data/.github/ISSUE_TEMPLATE/bug_report.md +38 -0
  3. data/.github/ISSUE_TEMPLATE/enhancement.md +27 -0
  4. data/.github/actions/simplecov-report/LICENSE +22 -0
  5. data/.github/actions/simplecov-report/README.md +36 -0
  6. data/.github/actions/simplecov-report/__tests__/.keep +0 -0
  7. data/.github/actions/simplecov-report/__tests__/main.test.ts +3 -0
  8. data/.github/actions/simplecov-report/action.yml +25 -0
  9. data/.github/actions/simplecov-report/dist/index.js +10238 -0
  10. data/.github/actions/simplecov-report/dummy_coverage/.last_run.json +5 -0
  11. data/.github/actions/simplecov-report/jest.config.js +11 -0
  12. data/.github/actions/simplecov-report/package.json +51 -0
  13. data/.github/actions/simplecov-report/src/main.ts +54 -0
  14. data/.github/actions/simplecov-report/src/report.ts +28 -0
  15. data/.github/actions/simplecov-report/tsconfig.json +12 -0
  16. data/.github/workflows/pr_ci.yml +77 -0
  17. data/.github/workflows/release.yml +51 -0
  18. data/.github/workflows/repolinter.yml +31 -0
  19. data/.github/workflows/rubocop.yml +17 -0
  20. data/.github/workflows/scripts/rubygems-authenticate.py +13 -0
  21. data/.github/workflows/scripts/rubygems-publish.rb +33 -0
  22. data/.gitignore +72 -0
  23. data/.rubocop.yml +9 -0
  24. data/.rubocop_todo.yml +1414 -0
  25. data/.simplecov +16 -0
  26. data/CHANGELOG.md +69 -0
  27. data/CONTRIBUTING.md +22 -0
  28. data/Gemfile +6 -0
  29. data/Gemfile_test +58 -0
  30. data/LICENSE +43 -0
  31. data/README.md +133 -0
  32. data/README_agent.md +44 -0
  33. data/Rakefile +28 -0
  34. data/THIRD_PARTY_NOTICES.md +36 -0
  35. data/lib/newrelic_security/agent/agent.rb +109 -0
  36. data/lib/newrelic_security/agent/configuration/default_source.rb +8 -0
  37. data/lib/newrelic_security/agent/configuration/environment_source.rb +8 -0
  38. data/lib/newrelic_security/agent/configuration/manager.rb +178 -0
  39. data/lib/newrelic_security/agent/configuration/manual_source.rb +8 -0
  40. data/lib/newrelic_security/agent/configuration/server_source.rb +8 -0
  41. data/lib/newrelic_security/agent/configuration/yaml_source.rb +8 -0
  42. data/lib/newrelic_security/agent/control/app_info.rb +132 -0
  43. data/lib/newrelic_security/agent/control/application_url_mappings.rb +66 -0
  44. data/lib/newrelic_security/agent/control/collector.rb +117 -0
  45. data/lib/newrelic_security/agent/control/control_command.rb +117 -0
  46. data/lib/newrelic_security/agent/control/critical_message.rb +58 -0
  47. data/lib/newrelic_security/agent/control/event.rb +149 -0
  48. data/lib/newrelic_security/agent/control/event_counter.rb +28 -0
  49. data/lib/newrelic_security/agent/control/event_processor.rb +134 -0
  50. data/lib/newrelic_security/agent/control/event_stats.rb +26 -0
  51. data/lib/newrelic_security/agent/control/event_subscriber.rb +28 -0
  52. data/lib/newrelic_security/agent/control/exit_event.rb +38 -0
  53. data/lib/newrelic_security/agent/control/fuzz_request.rb +18 -0
  54. data/lib/newrelic_security/agent/control/grpc_context.rb +57 -0
  55. data/lib/newrelic_security/agent/control/health_check.rb +136 -0
  56. data/lib/newrelic_security/agent/control/http_context.rb +73 -0
  57. data/lib/newrelic_security/agent/control/iast_client.rb +151 -0
  58. data/lib/newrelic_security/agent/control/iast_data_transfer_request.rb +32 -0
  59. data/lib/newrelic_security/agent/control/reflected_xss.rb +258 -0
  60. data/lib/newrelic_security/agent/control/websocket_client.rb +131 -0
  61. data/lib/newrelic_security/agent/logging/init_logger.rb +91 -0
  62. data/lib/newrelic_security/agent/logging/logger.rb +92 -0
  63. data/lib/newrelic_security/agent/logging/null_logger.rb +21 -0
  64. data/lib/newrelic_security/agent/resources/cert.pem +50 -0
  65. data/lib/newrelic_security/agent/utils/agent_utils.rb +219 -0
  66. data/lib/newrelic_security/agent.rb +57 -0
  67. data/lib/newrelic_security/constants.rb +67 -0
  68. data/lib/newrelic_security/instrumentation-security/active_record/mysql2_adapter/chain.rb +70 -0
  69. data/lib/newrelic_security/instrumentation-security/active_record/mysql2_adapter/instrumentation.rb +187 -0
  70. data/lib/newrelic_security/instrumentation-security/active_record/mysql2_adapter/prepend.rb +54 -0
  71. data/lib/newrelic_security/instrumentation-security/active_record/postgresql_adapter/chain.rb +60 -0
  72. data/lib/newrelic_security/instrumentation-security/active_record/postgresql_adapter/instrumentation.rb +143 -0
  73. data/lib/newrelic_security/instrumentation-security/active_record/postgresql_adapter/prepend.rb +48 -0
  74. data/lib/newrelic_security/instrumentation-security/active_record/sqlite3_adapter/chain.rb +72 -0
  75. data/lib/newrelic_security/instrumentation-security/active_record/sqlite3_adapter/instrumentation.rb +187 -0
  76. data/lib/newrelic_security/instrumentation-security/active_record/sqlite3_adapter/prepend.rb +54 -0
  77. data/lib/newrelic_security/instrumentation-security/async-http/chain.rb +21 -0
  78. data/lib/newrelic_security/instrumentation-security/async-http/instrumentation.rb +46 -0
  79. data/lib/newrelic_security/instrumentation-security/async-http/prepend.rb +16 -0
  80. data/lib/newrelic_security/instrumentation-security/curb/chain.rb +26 -0
  81. data/lib/newrelic_security/instrumentation-security/curb/instrumentation.rb +52 -0
  82. data/lib/newrelic_security/instrumentation-security/curb/prepend.rb +18 -0
  83. data/lib/newrelic_security/instrumentation-security/dir/chain.rb +42 -0
  84. data/lib/newrelic_security/instrumentation-security/dir/instrumentation.rb +102 -0
  85. data/lib/newrelic_security/instrumentation-security/dir/prepend.rb +28 -0
  86. data/lib/newrelic_security/instrumentation-security/ethon/chain.rb +53 -0
  87. data/lib/newrelic_security/instrumentation-security/ethon/instrumentation.rb +122 -0
  88. data/lib/newrelic_security/instrumentation-security/ethon/prepend.rb +39 -0
  89. data/lib/newrelic_security/instrumentation-security/excon/chain.rb +23 -0
  90. data/lib/newrelic_security/instrumentation-security/excon/instrumentation.rb +44 -0
  91. data/lib/newrelic_security/instrumentation-security/excon/prepend.rb +17 -0
  92. data/lib/newrelic_security/instrumentation-security/file/chain.rb +34 -0
  93. data/lib/newrelic_security/instrumentation-security/file/instrumentation.rb +62 -0
  94. data/lib/newrelic_security/instrumentation-security/file/prepend.rb +22 -0
  95. data/lib/newrelic_security/instrumentation-security/grape/chain.rb +42 -0
  96. data/lib/newrelic_security/instrumentation-security/grape/instrumentation.rb +56 -0
  97. data/lib/newrelic_security/instrumentation-security/grape/prepend.rb +30 -0
  98. data/lib/newrelic_security/instrumentation-security/grpc/client/chain.rb +47 -0
  99. data/lib/newrelic_security/instrumentation-security/grpc/client/instrumentation.rb +37 -0
  100. data/lib/newrelic_security/instrumentation-security/grpc/client/prepend.rb +36 -0
  101. data/lib/newrelic_security/instrumentation-security/grpc/server/chain.rb +62 -0
  102. data/lib/newrelic_security/instrumentation-security/grpc/server/instrumentation.rb +65 -0
  103. data/lib/newrelic_security/instrumentation-security/grpc/server/prepend.rb +46 -0
  104. data/lib/newrelic_security/instrumentation-security/httpclient/chain.rb +30 -0
  105. data/lib/newrelic_security/instrumentation-security/httpclient/instrumentation.rb +82 -0
  106. data/lib/newrelic_security/instrumentation-security/httpclient/prepend.rb +22 -0
  107. data/lib/newrelic_security/instrumentation-security/httprb/chain.rb +21 -0
  108. data/lib/newrelic_security/instrumentation-security/httprb/instrumentation.rb +44 -0
  109. data/lib/newrelic_security/instrumentation-security/httprb/prepend.rb +16 -0
  110. data/lib/newrelic_security/instrumentation-security/httpx/chain.rb +23 -0
  111. data/lib/newrelic_security/instrumentation-security/httpx/instrumentation.rb +51 -0
  112. data/lib/newrelic_security/instrumentation-security/httpx/prepend.rb +18 -0
  113. data/lib/newrelic_security/instrumentation-security/instrumentation_loader.rb +50 -0
  114. data/lib/newrelic_security/instrumentation-security/instrumentation_utils.rb +165 -0
  115. data/lib/newrelic_security/instrumentation-security/io/chain.rb +113 -0
  116. data/lib/newrelic_security/instrumentation-security/io/instrumentation.rb +300 -0
  117. data/lib/newrelic_security/instrumentation-security/io/prepend.rb +86 -0
  118. data/lib/newrelic_security/instrumentation-security/kernel/chain.rb +65 -0
  119. data/lib/newrelic_security/instrumentation-security/kernel/instrumentation.rb +167 -0
  120. data/lib/newrelic_security/instrumentation-security/kernel/prepend.rb +50 -0
  121. data/lib/newrelic_security/instrumentation-security/mongo/chain.rb +106 -0
  122. data/lib/newrelic_security/instrumentation-security/mongo/instrumentation.rb +273 -0
  123. data/lib/newrelic_security/instrumentation-security/mongo/prepend.rb +77 -0
  124. data/lib/newrelic_security/instrumentation-security/mysql2/chain.rb +53 -0
  125. data/lib/newrelic_security/instrumentation-security/mysql2/instrumentation.rb +84 -0
  126. data/lib/newrelic_security/instrumentation-security/mysql2/prepend.rb +37 -0
  127. data/lib/newrelic_security/instrumentation-security/net_http/chain.rb +21 -0
  128. data/lib/newrelic_security/instrumentation-security/net_http/instrumentation.rb +60 -0
  129. data/lib/newrelic_security/instrumentation-security/net_http/prepend.rb +16 -0
  130. data/lib/newrelic_security/instrumentation-security/net_ldap/chain.rb +21 -0
  131. data/lib/newrelic_security/instrumentation-security/net_ldap/instrumentation.rb +42 -0
  132. data/lib/newrelic_security/instrumentation-security/net_ldap/prepend.rb +16 -0
  133. data/lib/newrelic_security/instrumentation-security/nokogiri/chain.rb +46 -0
  134. data/lib/newrelic_security/instrumentation-security/nokogiri/instrumentation.rb +36 -0
  135. data/lib/newrelic_security/instrumentation-security/nokogiri/prepend.rb +31 -0
  136. data/lib/newrelic_security/instrumentation-security/padrino/chain.rb +26 -0
  137. data/lib/newrelic_security/instrumentation-security/padrino/instrumentation.rb +42 -0
  138. data/lib/newrelic_security/instrumentation-security/padrino/prepend.rb +20 -0
  139. data/lib/newrelic_security/instrumentation-security/patron/chain.rb +23 -0
  140. data/lib/newrelic_security/instrumentation-security/patron/instrumentation.rb +50 -0
  141. data/lib/newrelic_security/instrumentation-security/patron/prepend.rb +18 -0
  142. data/lib/newrelic_security/instrumentation-security/pg/chain.rb +49 -0
  143. data/lib/newrelic_security/instrumentation-security/pg/instrumentation.rb +102 -0
  144. data/lib/newrelic_security/instrumentation-security/pg/prepend.rb +36 -0
  145. data/lib/newrelic_security/instrumentation-security/pty/chain.rb +31 -0
  146. data/lib/newrelic_security/instrumentation-security/pty/instrumentation.rb +52 -0
  147. data/lib/newrelic_security/instrumentation-security/pty/prepend.rb +22 -0
  148. data/lib/newrelic_security/instrumentation-security/rails/chain.rb +46 -0
  149. data/lib/newrelic_security/instrumentation-security/rails/instrumentation.rb +67 -0
  150. data/lib/newrelic_security/instrumentation-security/rails/prepend.rb +33 -0
  151. data/lib/newrelic_security/instrumentation-security/roda/chain.rb +22 -0
  152. data/lib/newrelic_security/instrumentation-security/roda/instrumentation.rb +41 -0
  153. data/lib/newrelic_security/instrumentation-security/roda/prepend.rb +16 -0
  154. data/lib/newrelic_security/instrumentation-security/sinatra/chain.rb +29 -0
  155. data/lib/newrelic_security/instrumentation-security/sinatra/instrumentation.rb +49 -0
  156. data/lib/newrelic_security/instrumentation-security/sinatra/prepend.rb +21 -0
  157. data/lib/newrelic_security/instrumentation-security/sqlite3/chain.rb +79 -0
  158. data/lib/newrelic_security/instrumentation-security/sqlite3/instrumentation.rb +164 -0
  159. data/lib/newrelic_security/instrumentation-security/sqlite3/prepend.rb +56 -0
  160. data/lib/newrelic_security/newrelic-security-api/api.rb +72 -0
  161. data/lib/newrelic_security/version.rb +5 -0
  162. data/lib/newrelic_security/websocket-client-simple/client.rb +128 -0
  163. data/lib/newrelic_security/websocket-client-simple/event_emitter.rb +72 -0
  164. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/error.rb +129 -0
  165. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/exception_handler.rb +32 -0
  166. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/base.rb +62 -0
  167. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/data.rb +49 -0
  168. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/handler/base.rb +41 -0
  169. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/handler/handler03.rb +224 -0
  170. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/handler/handler04.rb +18 -0
  171. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/handler/handler05.rb +15 -0
  172. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/handler/handler07.rb +78 -0
  173. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/handler/handler75.rb +78 -0
  174. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/handler.rb +15 -0
  175. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/incoming/client.rb +17 -0
  176. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/incoming/server.rb +17 -0
  177. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/incoming.rb +52 -0
  178. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/outgoing/client.rb +17 -0
  179. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/outgoing/server.rb +17 -0
  180. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/outgoing.rb +35 -0
  181. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame.rb +11 -0
  182. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/base.rb +142 -0
  183. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/client.rb +130 -0
  184. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/base.rb +49 -0
  185. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/client.rb +32 -0
  186. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/client01.rb +20 -0
  187. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/client04.rb +63 -0
  188. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/client11.rb +22 -0
  189. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/client75.rb +39 -0
  190. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/client76.rb +105 -0
  191. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/server.rb +10 -0
  192. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/server04.rb +56 -0
  193. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/server75.rb +40 -0
  194. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/server76.rb +75 -0
  195. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler.rb +21 -0
  196. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/server.rb +179 -0
  197. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake.rb +10 -0
  198. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/nice_inspect.rb +12 -0
  199. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/version.rb +5 -0
  200. data/lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket.rb +50 -0
  201. data/lib/newrelic_security.rb +6 -0
  202. data/lib/tasks/all.rb +8 -0
  203. data/lib/tasks/coverage_report.rake +27 -0
  204. data/newrelic_security.gemspec +51 -0
  205. metadata +342 -0
@@ -0,0 +1,50 @@
1
+ # frozen_string_literal: true
2
+
3
+ # WebSocket protocol implementation in Ruby
4
+ # This module does not provide a WebSocket server or client, but is made for using
5
+ # in http servers or clients to provide WebSocket support.
6
+ # @author Bernard "Imanel" Potocki
7
+ # @see http://github.com/imanel/websocket-ruby main repository
8
+ module NewRelic
9
+ module Security
10
+ module WebSocket
11
+ # Default WebSocket version to use
12
+ DEFAULT_VERSION = 13
13
+ ROOT = __dir__
14
+
15
+ autoload :Error, "#{ROOT}/websocket/error"
16
+ autoload :ExceptionHandler, "#{ROOT}/websocket/exception_handler"
17
+ autoload :Frame, "#{ROOT}/websocket/frame"
18
+ autoload :Handshake, "#{ROOT}/websocket/handshake"
19
+ autoload :NiceInspect, "#{ROOT}/websocket/nice_inspect"
20
+
21
+ # Limit of frame size payload in bytes
22
+ def self.max_frame_size
23
+ @max_frame_size ||= 20 * 1024 * 1024 # 20MB
24
+ end
25
+
26
+ # Set limit of frame size payload in bytes
27
+ def self.max_frame_size=(val)
28
+ @max_frame_size = val
29
+ end
30
+
31
+ # If set to true error will be raised instead of setting `error` method.
32
+ # All errors inherit from NewRelic::Security::WebSocket::Error.
33
+ def self.should_raise
34
+ @should_raise ||= false
35
+ end
36
+
37
+ # Should protocol errors raise ruby errors? If false then `error` flag is set instead.
38
+ def self.should_raise=(val)
39
+ @should_raise = val
40
+ end
41
+ end
42
+ end
43
+ end
44
+
45
+ # Try loading websocket-native if available
46
+ begin
47
+ require 'websocket-native'
48
+ rescue LoadError => e
49
+ raise unless e.message =~ /websocket-native/
50
+ end
@@ -0,0 +1,6 @@
1
+ require "newrelic_security/version"
2
+
3
+ module NewRelic::Security
4
+ class Error < StandardError; end
5
+ require 'newrelic_security/agent' unless defined?(NewRelic::Security::Agent)
6
+ end
data/lib/tasks/all.rb ADDED
@@ -0,0 +1,8 @@
1
+ # This file is distributed under New Relic's license terms.
2
+ # See https://github.com/newrelic/newrelic-ruby-agent/blob/main/LICENSE for complete details.
3
+ # frozen_string_literal: true
4
+
5
+ # This is required to load in task definitions
6
+ Dir.glob(File.join(File.dirname(__FILE__), '*.rake')) do |file|
7
+ load file
8
+ end
@@ -0,0 +1,27 @@
1
+ # This file is distributed under New Relic's license terms.
2
+ # See https://github.com/newrelic/csec-ruby-agent/blob/main/LICENSE for complete details.
3
+ # frozen_string_literal: true
4
+
5
+ if ENV['CI']
6
+ namespace :coverage do
7
+ desc 'Collates all result sets generated by the different test runners'
8
+ task :report do
9
+ require 'simplecov'
10
+ require 'fileutils'
11
+
12
+ SimpleCov.coverage_dir('coverage_results')
13
+ SimpleCov.collate(Dir['**/coverage-report-unit-tests-*/coverage_*/.resultset.json']) do
14
+ formatter SimpleCov::Formatter::HTMLFormatter
15
+ refuse_coverage_drop
16
+ end
17
+
18
+ Dir['coverage-report-unit-tests-*'].each { |dir| FileUtils.rm_rf(dir) }
19
+ end
20
+
21
+ desc 'Removes all coverage_* directories'
22
+ task :clear do
23
+ require 'fileutils'
24
+ Dir['coverage_*'].each { |dir| FileUtils.rm_rf(dir) }
25
+ end
26
+ end
27
+ end
@@ -0,0 +1,51 @@
1
+ lib = File.expand_path('../lib', __FILE__)
2
+ $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
3
+ require_relative 'lib/newrelic_security/version'
4
+
5
+ Gem::Specification.new do |spec|
6
+ spec.name = 'newrelic_security'
7
+ spec.version = NewRelic::Security::VERSION
8
+ spec.authors = ['Prateek Sen']
9
+ spec.licenses = ['New Relic Pre-Release Software Notice']
10
+ spec.email = ['support@newrelic.com']
11
+
12
+ spec.summary = %q{Extension for newrelic_rpm with security feature}
13
+ spec.description = %q{New Relic is a performance management system, developed by New Relic,
14
+ Inc (http://www.newrelic.com). This gem is an extension for newrelic_rpm with security feature, hosted on
15
+ https://github.com/newrelic/csec-ruby-agent/}
16
+ spec.homepage = 'https://github.com/newrelic/csec-ruby-agent'
17
+ spec.required_ruby_version = Gem::Requirement.new('>= 2.4.0')
18
+ spec.required_rubygems_version = Gem::Requirement.new('> 1.3.1') if spec.respond_to?(:required_rubygems_version=)
19
+
20
+ spec.metadata = {
21
+ 'bug_tracker_uri' => 'https://github.com/newrelic/csec-ruby-agent/issues',
22
+ 'changelog_uri' => 'https://github.com/newrelic/csec-ruby-agent/blob/main/CHANGELOG.md',
23
+ 'documentation_uri' => 'https://docs.newrelic.com/docs/iast/introduction/',
24
+ 'source_code_uri' => 'https://github.com/newrelic/csec-ruby-agent',
25
+ 'homepage_uri' => 'https://github.com/newrelic/csec-ruby-agent'
26
+ }
27
+ # Specify which files should be added to the gem when it is released.
28
+ # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
29
+ spec.files = Dir.chdir(File.expand_path('..', __FILE__)) do
30
+ `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }.push(`git ls-files -z --others`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) } )
31
+ end
32
+ spec.bindir = 'exe'
33
+ spec.executables = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
34
+ spec.extra_rdoc_files = [
35
+ 'CHANGELOG.md',
36
+ 'LICENSE',
37
+ 'README.md',
38
+ 'CONTRIBUTING.md'
39
+ ]
40
+ spec.require_paths = ['lib']
41
+
42
+ spec.add_dependency 'newrelic_rpm', '>= 9.12.0'
43
+
44
+ spec.add_development_dependency 'minitest', "#{RUBY_VERSION >= '2.7.0' ? '~> 5.18' : '4.7.5'}"
45
+
46
+ spec.add_development_dependency 'rubocop', "#{RUBY_VERSION < '2.6.0' ? '< 1.49.0' : '~> 1.49.0'}"
47
+ spec.add_development_dependency 'rubocop-minitest', '~> 0.29' if RUBY_VERSION >= '2.6.0'
48
+ spec.add_development_dependency 'rubocop-rake', '~> 0.6' if RUBY_VERSION >= '2.5.0'
49
+ spec.add_development_dependency 'simplecov', '~> 0.22' if RUBY_VERSION >= '2.5.0'
50
+
51
+ end
metadata ADDED
@@ -0,0 +1,342 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: newrelic_security
3
+ version: !ruby/object:Gem::Version
4
+ version: 0.1.0
5
+ platform: ruby
6
+ authors:
7
+ - Prateek Sen
8
+ autorequire:
9
+ bindir: exe
10
+ cert_chain: []
11
+ date: 2024-07-29 00:00:00.000000000 Z
12
+ dependencies:
13
+ - !ruby/object:Gem::Dependency
14
+ name: newrelic_rpm
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - ">="
18
+ - !ruby/object:Gem::Version
19
+ version: 9.12.0
20
+ type: :runtime
21
+ prerelease: false
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - ">="
25
+ - !ruby/object:Gem::Version
26
+ version: 9.12.0
27
+ - !ruby/object:Gem::Dependency
28
+ name: minitest
29
+ requirement: !ruby/object:Gem::Requirement
30
+ requirements:
31
+ - - "~>"
32
+ - !ruby/object:Gem::Version
33
+ version: '5.18'
34
+ type: :development
35
+ prerelease: false
36
+ version_requirements: !ruby/object:Gem::Requirement
37
+ requirements:
38
+ - - "~>"
39
+ - !ruby/object:Gem::Version
40
+ version: '5.18'
41
+ - !ruby/object:Gem::Dependency
42
+ name: rubocop
43
+ requirement: !ruby/object:Gem::Requirement
44
+ requirements:
45
+ - - "~>"
46
+ - !ruby/object:Gem::Version
47
+ version: 1.49.0
48
+ type: :development
49
+ prerelease: false
50
+ version_requirements: !ruby/object:Gem::Requirement
51
+ requirements:
52
+ - - "~>"
53
+ - !ruby/object:Gem::Version
54
+ version: 1.49.0
55
+ - !ruby/object:Gem::Dependency
56
+ name: rubocop-minitest
57
+ requirement: !ruby/object:Gem::Requirement
58
+ requirements:
59
+ - - "~>"
60
+ - !ruby/object:Gem::Version
61
+ version: '0.29'
62
+ type: :development
63
+ prerelease: false
64
+ version_requirements: !ruby/object:Gem::Requirement
65
+ requirements:
66
+ - - "~>"
67
+ - !ruby/object:Gem::Version
68
+ version: '0.29'
69
+ - !ruby/object:Gem::Dependency
70
+ name: rubocop-rake
71
+ requirement: !ruby/object:Gem::Requirement
72
+ requirements:
73
+ - - "~>"
74
+ - !ruby/object:Gem::Version
75
+ version: '0.6'
76
+ type: :development
77
+ prerelease: false
78
+ version_requirements: !ruby/object:Gem::Requirement
79
+ requirements:
80
+ - - "~>"
81
+ - !ruby/object:Gem::Version
82
+ version: '0.6'
83
+ - !ruby/object:Gem::Dependency
84
+ name: simplecov
85
+ requirement: !ruby/object:Gem::Requirement
86
+ requirements:
87
+ - - "~>"
88
+ - !ruby/object:Gem::Version
89
+ version: '0.22'
90
+ type: :development
91
+ prerelease: false
92
+ version_requirements: !ruby/object:Gem::Requirement
93
+ requirements:
94
+ - - "~>"
95
+ - !ruby/object:Gem::Version
96
+ version: '0.22'
97
+ description: |-
98
+ New Relic is a performance management system, developed by New Relic,
99
+ Inc (http://www.newrelic.com). This gem is an extension for newrelic_rpm with security feature, hosted on
100
+ https://github.com/newrelic/csec-ruby-agent/
101
+ email:
102
+ - support@newrelic.com
103
+ executables: []
104
+ extensions: []
105
+ extra_rdoc_files:
106
+ - CHANGELOG.md
107
+ - LICENSE
108
+ - README.md
109
+ - CONTRIBUTING.md
110
+ files:
111
+ - ".github/ISSUE_TEMPLATE/bug_report.md"
112
+ - ".github/ISSUE_TEMPLATE/enhancement.md"
113
+ - ".github/actions/simplecov-report/LICENSE"
114
+ - ".github/actions/simplecov-report/README.md"
115
+ - ".github/actions/simplecov-report/__tests__/.keep"
116
+ - ".github/actions/simplecov-report/__tests__/main.test.ts"
117
+ - ".github/actions/simplecov-report/action.yml"
118
+ - ".github/actions/simplecov-report/dist/index.js"
119
+ - ".github/actions/simplecov-report/dummy_coverage/.last_run.json"
120
+ - ".github/actions/simplecov-report/jest.config.js"
121
+ - ".github/actions/simplecov-report/package.json"
122
+ - ".github/actions/simplecov-report/src/main.ts"
123
+ - ".github/actions/simplecov-report/src/report.ts"
124
+ - ".github/actions/simplecov-report/tsconfig.json"
125
+ - ".github/workflows/pr_ci.yml"
126
+ - ".github/workflows/release.yml"
127
+ - ".github/workflows/repolinter.yml"
128
+ - ".github/workflows/rubocop.yml"
129
+ - ".github/workflows/scripts/rubygems-authenticate.py"
130
+ - ".github/workflows/scripts/rubygems-publish.rb"
131
+ - ".gitignore"
132
+ - ".rubocop.yml"
133
+ - ".rubocop_todo.yml"
134
+ - ".simplecov"
135
+ - CHANGELOG.md
136
+ - CONTRIBUTING.md
137
+ - Gemfile
138
+ - Gemfile_test
139
+ - LICENSE
140
+ - README.md
141
+ - README_agent.md
142
+ - Rakefile
143
+ - THIRD_PARTY_NOTICES.md
144
+ - lib/newrelic_security.rb
145
+ - lib/newrelic_security/agent.rb
146
+ - lib/newrelic_security/agent/agent.rb
147
+ - lib/newrelic_security/agent/configuration/default_source.rb
148
+ - lib/newrelic_security/agent/configuration/environment_source.rb
149
+ - lib/newrelic_security/agent/configuration/manager.rb
150
+ - lib/newrelic_security/agent/configuration/manual_source.rb
151
+ - lib/newrelic_security/agent/configuration/server_source.rb
152
+ - lib/newrelic_security/agent/configuration/yaml_source.rb
153
+ - lib/newrelic_security/agent/control/app_info.rb
154
+ - lib/newrelic_security/agent/control/application_url_mappings.rb
155
+ - lib/newrelic_security/agent/control/collector.rb
156
+ - lib/newrelic_security/agent/control/control_command.rb
157
+ - lib/newrelic_security/agent/control/critical_message.rb
158
+ - lib/newrelic_security/agent/control/event.rb
159
+ - lib/newrelic_security/agent/control/event_counter.rb
160
+ - lib/newrelic_security/agent/control/event_processor.rb
161
+ - lib/newrelic_security/agent/control/event_stats.rb
162
+ - lib/newrelic_security/agent/control/event_subscriber.rb
163
+ - lib/newrelic_security/agent/control/exit_event.rb
164
+ - lib/newrelic_security/agent/control/fuzz_request.rb
165
+ - lib/newrelic_security/agent/control/grpc_context.rb
166
+ - lib/newrelic_security/agent/control/health_check.rb
167
+ - lib/newrelic_security/agent/control/http_context.rb
168
+ - lib/newrelic_security/agent/control/iast_client.rb
169
+ - lib/newrelic_security/agent/control/iast_data_transfer_request.rb
170
+ - lib/newrelic_security/agent/control/reflected_xss.rb
171
+ - lib/newrelic_security/agent/control/websocket_client.rb
172
+ - lib/newrelic_security/agent/logging/init_logger.rb
173
+ - lib/newrelic_security/agent/logging/logger.rb
174
+ - lib/newrelic_security/agent/logging/null_logger.rb
175
+ - lib/newrelic_security/agent/resources/cert.pem
176
+ - lib/newrelic_security/agent/utils/agent_utils.rb
177
+ - lib/newrelic_security/constants.rb
178
+ - lib/newrelic_security/instrumentation-security/active_record/mysql2_adapter/chain.rb
179
+ - lib/newrelic_security/instrumentation-security/active_record/mysql2_adapter/instrumentation.rb
180
+ - lib/newrelic_security/instrumentation-security/active_record/mysql2_adapter/prepend.rb
181
+ - lib/newrelic_security/instrumentation-security/active_record/postgresql_adapter/chain.rb
182
+ - lib/newrelic_security/instrumentation-security/active_record/postgresql_adapter/instrumentation.rb
183
+ - lib/newrelic_security/instrumentation-security/active_record/postgresql_adapter/prepend.rb
184
+ - lib/newrelic_security/instrumentation-security/active_record/sqlite3_adapter/chain.rb
185
+ - lib/newrelic_security/instrumentation-security/active_record/sqlite3_adapter/instrumentation.rb
186
+ - lib/newrelic_security/instrumentation-security/active_record/sqlite3_adapter/prepend.rb
187
+ - lib/newrelic_security/instrumentation-security/async-http/chain.rb
188
+ - lib/newrelic_security/instrumentation-security/async-http/instrumentation.rb
189
+ - lib/newrelic_security/instrumentation-security/async-http/prepend.rb
190
+ - lib/newrelic_security/instrumentation-security/curb/chain.rb
191
+ - lib/newrelic_security/instrumentation-security/curb/instrumentation.rb
192
+ - lib/newrelic_security/instrumentation-security/curb/prepend.rb
193
+ - lib/newrelic_security/instrumentation-security/dir/chain.rb
194
+ - lib/newrelic_security/instrumentation-security/dir/instrumentation.rb
195
+ - lib/newrelic_security/instrumentation-security/dir/prepend.rb
196
+ - lib/newrelic_security/instrumentation-security/ethon/chain.rb
197
+ - lib/newrelic_security/instrumentation-security/ethon/instrumentation.rb
198
+ - lib/newrelic_security/instrumentation-security/ethon/prepend.rb
199
+ - lib/newrelic_security/instrumentation-security/excon/chain.rb
200
+ - lib/newrelic_security/instrumentation-security/excon/instrumentation.rb
201
+ - lib/newrelic_security/instrumentation-security/excon/prepend.rb
202
+ - lib/newrelic_security/instrumentation-security/file/chain.rb
203
+ - lib/newrelic_security/instrumentation-security/file/instrumentation.rb
204
+ - lib/newrelic_security/instrumentation-security/file/prepend.rb
205
+ - lib/newrelic_security/instrumentation-security/grape/chain.rb
206
+ - lib/newrelic_security/instrumentation-security/grape/instrumentation.rb
207
+ - lib/newrelic_security/instrumentation-security/grape/prepend.rb
208
+ - lib/newrelic_security/instrumentation-security/grpc/client/chain.rb
209
+ - lib/newrelic_security/instrumentation-security/grpc/client/instrumentation.rb
210
+ - lib/newrelic_security/instrumentation-security/grpc/client/prepend.rb
211
+ - lib/newrelic_security/instrumentation-security/grpc/server/chain.rb
212
+ - lib/newrelic_security/instrumentation-security/grpc/server/instrumentation.rb
213
+ - lib/newrelic_security/instrumentation-security/grpc/server/prepend.rb
214
+ - lib/newrelic_security/instrumentation-security/httpclient/chain.rb
215
+ - lib/newrelic_security/instrumentation-security/httpclient/instrumentation.rb
216
+ - lib/newrelic_security/instrumentation-security/httpclient/prepend.rb
217
+ - lib/newrelic_security/instrumentation-security/httprb/chain.rb
218
+ - lib/newrelic_security/instrumentation-security/httprb/instrumentation.rb
219
+ - lib/newrelic_security/instrumentation-security/httprb/prepend.rb
220
+ - lib/newrelic_security/instrumentation-security/httpx/chain.rb
221
+ - lib/newrelic_security/instrumentation-security/httpx/instrumentation.rb
222
+ - lib/newrelic_security/instrumentation-security/httpx/prepend.rb
223
+ - lib/newrelic_security/instrumentation-security/instrumentation_loader.rb
224
+ - lib/newrelic_security/instrumentation-security/instrumentation_utils.rb
225
+ - lib/newrelic_security/instrumentation-security/io/chain.rb
226
+ - lib/newrelic_security/instrumentation-security/io/instrumentation.rb
227
+ - lib/newrelic_security/instrumentation-security/io/prepend.rb
228
+ - lib/newrelic_security/instrumentation-security/kernel/chain.rb
229
+ - lib/newrelic_security/instrumentation-security/kernel/instrumentation.rb
230
+ - lib/newrelic_security/instrumentation-security/kernel/prepend.rb
231
+ - lib/newrelic_security/instrumentation-security/mongo/chain.rb
232
+ - lib/newrelic_security/instrumentation-security/mongo/instrumentation.rb
233
+ - lib/newrelic_security/instrumentation-security/mongo/prepend.rb
234
+ - lib/newrelic_security/instrumentation-security/mysql2/chain.rb
235
+ - lib/newrelic_security/instrumentation-security/mysql2/instrumentation.rb
236
+ - lib/newrelic_security/instrumentation-security/mysql2/prepend.rb
237
+ - lib/newrelic_security/instrumentation-security/net_http/chain.rb
238
+ - lib/newrelic_security/instrumentation-security/net_http/instrumentation.rb
239
+ - lib/newrelic_security/instrumentation-security/net_http/prepend.rb
240
+ - lib/newrelic_security/instrumentation-security/net_ldap/chain.rb
241
+ - lib/newrelic_security/instrumentation-security/net_ldap/instrumentation.rb
242
+ - lib/newrelic_security/instrumentation-security/net_ldap/prepend.rb
243
+ - lib/newrelic_security/instrumentation-security/nokogiri/chain.rb
244
+ - lib/newrelic_security/instrumentation-security/nokogiri/instrumentation.rb
245
+ - lib/newrelic_security/instrumentation-security/nokogiri/prepend.rb
246
+ - lib/newrelic_security/instrumentation-security/padrino/chain.rb
247
+ - lib/newrelic_security/instrumentation-security/padrino/instrumentation.rb
248
+ - lib/newrelic_security/instrumentation-security/padrino/prepend.rb
249
+ - lib/newrelic_security/instrumentation-security/patron/chain.rb
250
+ - lib/newrelic_security/instrumentation-security/patron/instrumentation.rb
251
+ - lib/newrelic_security/instrumentation-security/patron/prepend.rb
252
+ - lib/newrelic_security/instrumentation-security/pg/chain.rb
253
+ - lib/newrelic_security/instrumentation-security/pg/instrumentation.rb
254
+ - lib/newrelic_security/instrumentation-security/pg/prepend.rb
255
+ - lib/newrelic_security/instrumentation-security/pty/chain.rb
256
+ - lib/newrelic_security/instrumentation-security/pty/instrumentation.rb
257
+ - lib/newrelic_security/instrumentation-security/pty/prepend.rb
258
+ - lib/newrelic_security/instrumentation-security/rails/chain.rb
259
+ - lib/newrelic_security/instrumentation-security/rails/instrumentation.rb
260
+ - lib/newrelic_security/instrumentation-security/rails/prepend.rb
261
+ - lib/newrelic_security/instrumentation-security/roda/chain.rb
262
+ - lib/newrelic_security/instrumentation-security/roda/instrumentation.rb
263
+ - lib/newrelic_security/instrumentation-security/roda/prepend.rb
264
+ - lib/newrelic_security/instrumentation-security/sinatra/chain.rb
265
+ - lib/newrelic_security/instrumentation-security/sinatra/instrumentation.rb
266
+ - lib/newrelic_security/instrumentation-security/sinatra/prepend.rb
267
+ - lib/newrelic_security/instrumentation-security/sqlite3/chain.rb
268
+ - lib/newrelic_security/instrumentation-security/sqlite3/instrumentation.rb
269
+ - lib/newrelic_security/instrumentation-security/sqlite3/prepend.rb
270
+ - lib/newrelic_security/newrelic-security-api/api.rb
271
+ - lib/newrelic_security/version.rb
272
+ - lib/newrelic_security/websocket-client-simple/client.rb
273
+ - lib/newrelic_security/websocket-client-simple/event_emitter.rb
274
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket.rb
275
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/error.rb
276
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/exception_handler.rb
277
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame.rb
278
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/base.rb
279
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/data.rb
280
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/handler.rb
281
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/handler/base.rb
282
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/handler/handler03.rb
283
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/handler/handler04.rb
284
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/handler/handler05.rb
285
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/handler/handler07.rb
286
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/handler/handler75.rb
287
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/incoming.rb
288
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/incoming/client.rb
289
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/incoming/server.rb
290
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/outgoing.rb
291
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/outgoing/client.rb
292
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/frame/outgoing/server.rb
293
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake.rb
294
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/base.rb
295
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/client.rb
296
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler.rb
297
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/base.rb
298
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/client.rb
299
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/client01.rb
300
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/client04.rb
301
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/client11.rb
302
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/client75.rb
303
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/client76.rb
304
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/server.rb
305
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/server04.rb
306
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/server75.rb
307
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/handler/server76.rb
308
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/handshake/server.rb
309
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/nice_inspect.rb
310
+ - lib/newrelic_security/websocket-client-simple/websocket-ruby/lib/websocket/version.rb
311
+ - lib/tasks/all.rb
312
+ - lib/tasks/coverage_report.rake
313
+ - newrelic_security.gemspec
314
+ homepage: https://github.com/newrelic/csec-ruby-agent
315
+ licenses:
316
+ - New Relic Pre-Release Software Notice
317
+ metadata:
318
+ bug_tracker_uri: https://github.com/newrelic/csec-ruby-agent/issues
319
+ changelog_uri: https://github.com/newrelic/csec-ruby-agent/blob/main/CHANGELOG.md
320
+ documentation_uri: https://docs.newrelic.com/docs/iast/introduction/
321
+ source_code_uri: https://github.com/newrelic/csec-ruby-agent
322
+ homepage_uri: https://github.com/newrelic/csec-ruby-agent
323
+ post_install_message:
324
+ rdoc_options: []
325
+ require_paths:
326
+ - lib
327
+ required_ruby_version: !ruby/object:Gem::Requirement
328
+ requirements:
329
+ - - ">="
330
+ - !ruby/object:Gem::Version
331
+ version: 2.4.0
332
+ required_rubygems_version: !ruby/object:Gem::Requirement
333
+ requirements:
334
+ - - ">"
335
+ - !ruby/object:Gem::Version
336
+ version: 1.3.1
337
+ requirements: []
338
+ rubygems_version: 3.4.19
339
+ signing_key:
340
+ specification_version: 4
341
+ summary: Extension for newrelic_rpm with security feature
342
+ test_files: []