Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Expand SSRF support in IAST to apache-httpclient-5 and apache-httpasyncclient-4 #7920

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 17 commits into from
Dec 9, 2024
Merged

Expand SSRF support in IAST to apache-httpclient-5 and apache-httpasyncclient-4 #7920

Changes from 1 commit
Commits
Show all changes
17 commits
Select commit Hold shift + click to select a range
09d100c
Draft status commit
Mariovido Nov 8, 2024
821f857
Remove comments and leave minimal changes
Mariovido Nov 8, 2024
453d57b
Remove AgentInstaller code
Mariovido Nov 8, 2024
b07f70f
Merge master
Mariovido Nov 8, 2024
e65bf5b
Undo move of apache core module
Mariovido Nov 11, 2024
c4bd2fb
Undo apache decorator
Mariovido Nov 11, 2024
b24df39
Remove unused variable in the ssrf controller
Mariovido Nov 11, 2024
c7ffba1
Simplify instrumentation
Mariovido Nov 13, 2024
29ea5f2
First working solution
Mariovido Nov 13, 2024
af7c2aa
Add support for host methods
Mariovido Nov 13, 2024
160c0ca
Added support for last methods
Mariovido Nov 13, 2024
03a95d6
Add test propagationUtils
Mariovido Nov 13, 2024
7c085ba
Add support for apache-httpasynclient
Mariovido Nov 14, 2024
faa2492
Merge branch 'master' into mario.vidal/expand_support_ssrf_apache
Mariovido Nov 14, 2024
7b2ee35
Minor changes
Mariovido Nov 14, 2024
5347dd7
Change argument to string
Mariovido Dec 9, 2024
d7ed872
Merge branch 'master' into mario.vidal/expand_support_ssrf_apache
Mariovido Dec 9, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Simplify instrumentation
  • Loading branch information
@Mariovido
Mariovido committed Nov 13, 2024
commit c7ffba16628ae52c9a2c6860b55b73d9e7a7e1bf
8 changes: 6 additions & 2 deletions ...n/java/datadog/trace/instrumentation/apachehttpcore5/BasicHttpRequestInstrumentation.java
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,12 @@
package datadog.trace.instrumentation.apachehttpcore5;

import static net.bytebuddy.matcher.ElementMatchers.any;
import static net.bytebuddy.matcher.ElementMatchers.isConstructor;
import static net.bytebuddy.matcher.ElementMatchers.takesArguments;

import com.google.auto.service.AutoService;
import datadog.trace.agent.tooling.Instrumenter;
import datadog.trace.agent.tooling.InstrumenterModule;
import java.net.URI;
import net.bytebuddy.asm.Advice;

@AutoService(InstrumenterModule.class)
Expand All @@ -22,7 +24,9 @@ public String instrumentedType() {

@Override
public void methodAdvice(MethodTransformer transformer) {
transformer.applyAdvice(any(), BasicHttpRequestInstrumentation.class.getName() + "$CtorAdvice");
transformer.applyAdvice(
isConstructor().and(takesArguments(String.class, URI.class)),
BasicHttpRequestInstrumentation.class.getName() + "$CtorAdvice");
}

public static class CtorAdvice {
Expand Down