newrelic_security 0.3.0 → 0.4.1

data/lib/newrelic_security/instrumentation-security/graphql/prepend.rb

@@ -0,0 +1,18 @@
+module NewRelic::Security
+  module Instrumentation
+    module GraphQL
+      module Query
+        module Executor
+          module Prepend
+            include NewRelic::Security::Instrumentation::GraphQL::Query::Executor
+
+            def execute
+              execute_on_enter { return super }
+            end
+
+          end
+        end
+      end
+    end
+  end
+end

data/lib/newrelic_security/instrumentation-security/io/chain.rb

@@ -99,9 +99,9 @@ module NewRelic::Security
 
               alias_method :popen_without_security, :popen
               
-              def popen(*var)
+              def popen(*var, &block)
                 retval = nil
-                event = popen_on_enter(*var) { retval = popen_without_security(*var) }
+                event = popen_on_enter(*var) { retval = popen_without_security(*var, &block) }
                 popen_on_exit(event) { return retval }
               end
             end

data/lib/newrelic_security/instrumentation-security/io/prepend.rb

@@ -75,7 +75,7 @@ module NewRelic::Security
           binwrite_on_exit(event, retval) { return retval }
         end
 
-        def popen(*var)
+        def popen(*var, &block)
           retval = nil
           event = popen_on_enter(*var) { retval = super }
           popen_on_exit(event) { return retval }

data/lib/newrelic_security/instrumentation-security/pg/instrumentation.rb

@@ -75,7 +75,7 @@ module NewRelic::Security
         NewRelic::Security::Agent.logger.debug "OnEnter : #{self.class}.#{__method__}"
         hash = {}
         hash[:sql] = NewRelic::Security::Agent::Control::HTTPContext.get_context.cache[args[0].to_s] if NewRelic::Security::Agent::Control::HTTPContext.get_context
-        hash[:sql] = self.exec("select statement from pg_prepared_statements where name = '#{args[0]}'").getvalue(0,0) unless hash[:sql]
+        hash[:sql] = self.exec("select statement from pg_prepared_statements where name = #{escape_literal(args[0].to_s)}").getvalue(0,0) unless hash[:sql]
         hash[:parameters] = args[1].map(&:to_s)
         event = NewRelic::Security::Agent::Control::Collector.collect(SQL_DB_COMMAND, [hash], POSTGRES) unless NewRelic::Security::Instrumentation::InstrumentationUtils.sql_filter_events?(hash[:sql])
         NewRelic::Security::Agent::Control::HTTPContext.get_context.cache.delete(args[0].to_s) if NewRelic::Security::Agent::Control::HTTPContext.get_context

data/lib/newrelic_security/instrumentation-security/rack/chain.rb

@@ -0,0 +1,24 @@
+module NewRelic::Security
+  module Instrumentation
+    module Rack
+      module Builder
+        module Chain
+          def self.instrument!
+            ::Rack::Builder.class_eval do 
+              include NewRelic::Security::Instrumentation::Rack::Builder
+
+              alias_method :call_without_security, :call
+
+              def call(env)
+                retval = nil
+                event = call_on_enter(env) { retval = call_without_security(env) }
+                call_on_exit(event, retval) { return retval }
+              end
+            end
+          end
+        end
+      end
+    end
+    
+  end
+end

data/lib/newrelic_security/instrumentation-security/rack/instrumentation.rb

@@ -0,0 +1,44 @@
+require_relative 'prepend'
+require_relative 'chain'
+
+module NewRelic::Security
+  module Instrumentation
+    module Rack::Builder
+
+      def call_on_enter(env)
+        event = nil
+        NewRelic::Security::Agent.logger.debug "OnEnter : #{self.class}.#{__method__}"
+        return unless NewRelic::Security::Agent.config[:enabled]
+        NewRelic::Security::Agent.config.update_port = NewRelic::Security::Agent::Utils.app_port(env) unless NewRelic::Security::Agent.config[:listen_port]
+        NewRelic::Security::Agent::Utils.get_app_routes(:rack) if NewRelic::Security::Agent.agent.route_map.empty?
+        NewRelic::Security::Agent::Control::HTTPContext.set_context(env)
+        ctxt = NewRelic::Security::Agent::Control::HTTPContext.get_context
+        ctxt.route = "#{env[REQUEST_METHOD]}@#{env[PATH_INFO]}" if ctxt
+        NewRelic::Security::Agent::Utils.parse_fuzz_header(NewRelic::Security::Agent::Control::HTTPContext.get_context)
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+        return event
+      end
+      
+      def call_on_exit(event, retval)
+        NewRelic::Security::Agent.logger.debug "OnExit :  #{self.class}.#{__method__}"
+        # NewRelic::Security::Agent.logger.debug "\n\nHTTP Context : #{::NewRelic::Agent::Tracer.current_transaction.instance_variable_get(:@security_context_data).inspect}\n\n"
+        NewRelic::Security::Agent::Control::ReflectedXSS.check_xss(NewRelic::Security::Agent::Control::HTTPContext.get_context, retval) if NewRelic::Security::Agent.config[:'security.detection.rxss.enabled']
+        NewRelic::Security::Agent::Utils.delete_created_files(NewRelic::Security::Agent::Control::HTTPContext.get_context)
+        NewRelic::Security::Agent.agent.error_reporting&.report_unhandled_or_5xx_exceptions(NewRelic::Security::Agent::Control::HTTPContext.get_current_transaction, NewRelic::Security::Agent::Control::HTTPContext.get_context, retval[0])
+        NewRelic::Security::Agent::Control::HTTPContext.reset_context
+        NewRelic::Security::Agent.logger.debug "Exit event : #{event}"
+      rescue => exception
+        NewRelic::Security::Agent.logger.error "Exception in hook in #{self.class}.#{__method__}, #{exception.inspect}, #{exception.backtrace}"
+      ensure
+        yield
+      end
+      
+    end
+
+  end
+end
+
+NewRelic::Security::Instrumentation::InstrumentationLoader.install_instrumentation(:rack, NewRelic::Security::Agent.config[:app_class].class, ::NewRelic::Security::Instrumentation::Rack::Builder) if NewRelic::Security::Agent.config[:framework] == :rack

data/lib/newrelic_security/instrumentation-security/rack/prepend.rb

@@ -0,0 +1,18 @@
+module NewRelic::Security
+  module Instrumentation
+    module Rack
+      module Builder
+        module Prepend
+          include NewRelic::Security::Instrumentation::Rack::Builder
+
+          def call(env, &block)
+            retval = nil
+            event = call_on_enter(env) { retval = super }
+            call_on_exit(event, retval) { return retval }
+          end
+
+        end
+      end
+    end
+  end
+end

data/lib/newrelic_security/version.rb

@@ -1,5 +1,5 @@
 module NewRelic
   module Security
-    VERSION = "0.3.0"
+    VERSION = "0.4.1"
   end
 end

data/lib/newrelic_security/websocket-client-simple/client.rb

@@ -72,7 +72,11 @@ module NewRelic::Security
                     end
                   end
                 rescue IOError => e
-                  close false
+                  if e.inspect =~ /stream closed in another thread/
+                    close false
+                  else
+                    emit :error, e
+                  end
                 rescue => e
                   emit :error, e
                 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: newrelic_security
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.4.1
 platform: ruby
 authors:
 - Prateek Sen
-autorequire: 
+autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-11-20 00:00:00.000000000 Z
+date: 2026-08-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: newrelic_rpm
@@ -208,6 +208,9 @@ files:
 - lib/newrelic_security/instrumentation-security/grape/chain.rb
 - lib/newrelic_security/instrumentation-security/grape/instrumentation.rb
 - lib/newrelic_security/instrumentation-security/grape/prepend.rb
+- lib/newrelic_security/instrumentation-security/graphql/chain.rb
+- lib/newrelic_security/instrumentation-security/graphql/instrumentation.rb
+- lib/newrelic_security/instrumentation-security/graphql/prepend.rb
 - lib/newrelic_security/instrumentation-security/grpc/client/chain.rb
 - lib/newrelic_security/instrumentation-security/grpc/client/instrumentation.rb
 - lib/newrelic_security/instrumentation-security/grpc/client/prepend.rb
@@ -258,6 +261,9 @@ files:
 - lib/newrelic_security/instrumentation-security/pty/chain.rb
 - lib/newrelic_security/instrumentation-security/pty/instrumentation.rb
 - lib/newrelic_security/instrumentation-security/pty/prepend.rb
+- lib/newrelic_security/instrumentation-security/rack/chain.rb
+- lib/newrelic_security/instrumentation-security/rack/instrumentation.rb
+- lib/newrelic_security/instrumentation-security/rack/prepend.rb
 - lib/newrelic_security/instrumentation-security/rails/chain.rb
 - lib/newrelic_security/instrumentation-security/rails/instrumentation.rb
 - lib/newrelic_security/instrumentation-security/rails/prepend.rb
@@ -324,7 +330,7 @@ metadata:
   documentation_uri: https://docs.newrelic.com/docs/iast/introduction/
   source_code_uri: https://github.com/newrelic/csec-ruby-agent
   homepage_uri: https://github.com/newrelic/csec-ruby-agent
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -340,7 +346,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: 1.3.1
 requirements: []
 rubygems_version: 3.4.19
-signing_key: 
+signing_key:
 specification_version: 4
 summary: Extension for newrelic_rpm with security feature
 test_files: []