Skip to content

Jackson 1 instrumentation for IAST#4783

Merged
DDJavierSantos merged 2 commits into
masterfrom
jsantos/jackson-1-instrumentation
Apr 25, 2023
Merged

Jackson 1 instrumentation for IAST#4783
DDJavierSantos merged 2 commits into
masterfrom
jsantos/jackson-1-instrumentation

Conversation

@DDJavierSantos

@DDJavierSantos DDJavierSantos commented Feb 23, 2023

Copy link
Copy Markdown
Contributor

What Does This Do

Instrument the older versions of the jackson library.

Motivation

org.codehaus.jackson is used by Jersey 2 to deserialize json objects. We need to instrument the parser calls so we can achieve propagation in IAST.

Additional Notes

Comment thread dd-java-agent/instrumentation/glassfish/build.gradle Outdated
@smola smola changed the title Jackson 1 instrumentation Jackson 1 instrumentation for IAST Feb 24, 2023
@smola smola added the comp: asm iast Application Security Management (IAST) label Feb 24, 2023
@DDJavierSantos
DDJavierSantos force-pushed the jsantos/jackson-1-instrumentation branch from 196cd70 to 05bfa00 Compare March 23, 2023 16:52
@DDJavierSantos
DDJavierSantos requested a review from smola March 27, 2023 10:32
@DDJavierSantos
DDJavierSantos requested a review from smola March 29, 2023 16:15
@DDJavierSantos
DDJavierSantos force-pushed the jsantos/jackson-1-instrumentation branch from 4229846 to 83bdc02 Compare April 18, 2023 16:52
Comment thread dd-java-agent/instrumentation/jackson-core/jackson-core-1/build.gradle Outdated
@DDJavierSantos
DDJavierSantos requested a review from smola April 20, 2023 16:22
@DDJavierSantos
DDJavierSantos force-pushed the jsantos/jackson-1-instrumentation branch from b8c329c to 1f04c26 Compare April 21, 2023 07:43

@smola smola left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me. Just one comment about iast-instrumenter dependency.

Comment thread dd-java-agent/instrumentation/jackson-core/build.gradle
@DDJavierSantos
DDJavierSantos requested a review from smola April 24, 2023 12:14
@smola
smola marked this pull request as ready for review April 24, 2023 15:38
@smola
smola requested a review from a team as a code owner April 24, 2023 15:38
@DDJavierSantos
DDJavierSantos merged commit 405c5de into master Apr 25, 2023
@DDJavierSantos
DDJavierSantos deleted the jsantos/jackson-1-instrumentation branch April 25, 2023 09:23
@github-actions github-actions Bot added this to the 1.13.0 milestone Apr 25, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

comp: asm iast Application Security Management (IAST)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants