Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Exploit prevention for SQL injection (blocking support) #7231

Merged
merged 22 commits into from
Jul 5, 2024
Merged

Exploit prevention for SQL injection (blocking support) #7231

merged 22 commits into from
Jul 5, 2024
+220 −37

Commits on Jul 5, 2024

  1. Introduced SQL-injection blocking

    @ValentinZakharov
    ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    aa84e51 View commit details
    Browse the repository at this point in the history

  2. Fixed re-throwing BlockingException to change execution flow

    @ValentinZakharov
    ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    505e376 View commit details
    Browse the repository at this point in the history

  3. Fixed test

    @ValentinZakharov
    ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    b031429 View commit details
    Browse the repository at this point in the history

  4. Added debug log message when suppress exception in StatementInstrumen… 

    …tation
    @ValentinZakharov
    ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    736b864 View commit details
    Browse the repository at this point in the history

  5. Logger in separated class

    @ValentinZakharov
    ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    6689992 View commit details
    Browse the repository at this point in the history

  6. No blocking in database onConnection flow

    @ValentinZakharov
    ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    2a892b9 View commit details
    Browse the repository at this point in the history

  7. add smoke test for rasp stack trace

    @smola @ValentinZakharov
    smola authored and ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    1b94c76 View commit details
    Browse the repository at this point in the history

  8. [wip] smoke test rasp blocking

    @smola @ValentinZakharov
    smola authored and ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    149ad7e View commit details
    Browse the repository at this point in the history

  9. Missing return

    @ValentinZakharov
    ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    dbe6c70 View commit details
    Browse the repository at this point in the history

  10. Fix blocking test

    @smola @ValentinZakharov
    smola authored and ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    28e04e9 View commit details
    Browse the repository at this point in the history

  11. Fix test with groovy + jdk 11

    @smola @ValentinZakharov
    smola authored and ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    8611f68 View commit details
    Browse the repository at this point in the history

  12. SQLi RASP in one shot

    @ValentinZakharov
    ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    37cc42f View commit details
    Browse the repository at this point in the history

  13. Forbidden method invocation: java.lang.Class#forName

    @ValentinZakharov
    ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    bcbf96c View commit details
    Browse the repository at this point in the history

  14. Exclude SQL-injection test code

    @ValentinZakharov
    ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    b8ab2e3 View commit details
    Browse the repository at this point in the history

  15. fix appsec.blocked

    @smola @ValentinZakharov
    smola authored and ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    885fc92 View commit details
    Browse the repository at this point in the history

  16. remove debug level in smoke tests (increases flakiness under load)

    @smola @ValentinZakharov
    smola authored and ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    f6def5f View commit details
    Browse the repository at this point in the history

  17. add assert

    @smola @ValentinZakharov
    smola authored and ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    4e1aba5 View commit details
    Browse the repository at this point in the history

  18. fix tests

    @smola @ValentinZakharov
    smola authored and ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    96fe8ab View commit details
    Browse the repository at this point in the history

  19. Fixed suppress exception logic in StatementInstrumentation

    @ValentinZakharov
    ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    a50f162 View commit details
    Browse the repository at this point in the history

  20. Update dd-java-agent/instrumentation/jdbc/src/main/java/datadog/trace… 

    …/instrumentation/jdbc/InstrumentationLogger.java

Co-authored-by: Santiago M. Mola <[email protected]>
    @ValentinZakharov @smola
    ValentinZakharov and smola committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    a5570c9 View commit details
    Browse the repository at this point in the history

  21. Fixed typo in field name

    @ValentinZakharov
    ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    4ee6e4c View commit details
    Browse the repository at this point in the history

  22. Added RASP info in StatusLogger

    @ValentinZakharov
    ValentinZakharov committed Jul 5, 2024
    Configuration menu
    Copy the full SHA
    f21cea0 View commit details
    Browse the repository at this point in the history