Skip to content

Initial version of the vert.x 4.x instrumentation#4922

Merged
manuel-alvarez-alvarez merged 1 commit into
masterfrom
malvarez/iast-vertx4-support
Apr 25, 2023
Merged

Initial version of the vert.x 4.x instrumentation#4922
manuel-alvarez-alvarez merged 1 commit into
masterfrom
malvarez/iast-vertx4-support

Conversation

@manuel-alvarez-alvarez

@manuel-alvarez-alvarez manuel-alvarez-alvarez commented Mar 20, 2023

Copy link
Copy Markdown
Member

What Does This Do

Includes the required instrumentation points to add support for IAST in vert.x 4.x

Motivation

Additional Notes

@manuel-alvarez-alvarez manuel-alvarez-alvarez added the comp: asm iast Application Security Management (IAST) label Mar 20, 2023
@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx-support branch from 730d148 to 012980f Compare March 20, 2023 11:59
@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx4-support branch from 1f9dab3 to fb4401f Compare March 20, 2023 12:16
@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx-support branch from 012980f to 5774d75 Compare March 27, 2023 09:25
@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx4-support branch from fb4401f to fb90479 Compare March 27, 2023 09:38
@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx-support branch from 5774d75 to 1bb6918 Compare March 27, 2023 10:25
@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx4-support branch from fb90479 to e959aae Compare March 27, 2023 10:29
@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx-support branch 2 times, most recently from 073ca08 to bf45af7 Compare March 27, 2023 17:09
@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx4-support branch from e959aae to 93755de Compare March 27, 2023 17:27
@smola smola added the inst: vertx Eclipse Vert.x instrumentation label Mar 28, 2023
@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx4-support branch from 93755de to 266b455 Compare March 29, 2023 09:08
@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx-support branch from bf45af7 to 9b0f8ea Compare March 30, 2023 11:26
Base automatically changed from malvarez/iast-vertx-support to master March 30, 2023 13:59
@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx4-support branch 2 times, most recently from cf52eb0 to 9a05677 Compare March 30, 2023 14:15
@manuel-alvarez-alvarez
manuel-alvarez-alvarez marked this pull request as ready for review March 30, 2023 14:17
@manuel-alvarez-alvarez
manuel-alvarez-alvarez requested a review from a team March 30, 2023 14:17
@manuel-alvarez-alvarez
manuel-alvarez-alvarez requested a review from a team as a code owner March 30, 2023 14:17
@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx4-support branch 5 times, most recently from 3ff626d to 350f67f Compare April 5, 2023 07:23

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's about time we add preventive checks (taintedMap.get) to avoid tainting the same object multiple times.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sure, I'll update the PR and add the required checks.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've added them at the level of the propagation module (if we keep the web module we probably want to add them there as well)

@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx4-support branch from 350f67f to 6db78e5 Compare April 10, 2023 09:58
@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx4-support branch 3 times, most recently from 3b6518a to 7689fbc Compare April 14, 2023 07:50
@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx4-support branch 2 times, most recently from 13d8ee4 to 66138f6 Compare April 20, 2023 19:02
@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx4-support branch from 66138f6 to a87fc81 Compare April 24, 2023 08:03
@manuel-alvarez-alvarez
manuel-alvarez-alvarez force-pushed the malvarez/iast-vertx4-support branch from a87fc81 to 9fb7ee7 Compare April 24, 2023 08:48
@manuel-alvarez-alvarez
manuel-alvarez-alvarez merged commit a1569b3 into master Apr 25, 2023
@manuel-alvarez-alvarez
manuel-alvarez-alvarez deleted the malvarez/iast-vertx4-support branch April 25, 2023 07:12
@github-actions github-actions Bot added this to the 1.13.0 milestone Apr 25, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

comp: asm iast Application Security Management (IAST) inst: vertx Eclipse Vert.x instrumentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants