Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

internal/appsec: implement WAF actions for http/grpc #1533

Merged
merged 34 commits into from Dec 12, 2022
Merged

internal/appsec: implement WAF actions for http/grpc #1533

merged 34 commits into from Dec 12, 2022

Commits on Nov 10, 2022

  1. internal/appsec: implement IPFromRequest

    @Hellzy
    Hellzy committed Nov 10, 2022
    Configuration menu
    Copy the full SHA
    2b83f16 View commit details
    Browse the repository at this point in the history

  2. internal/appsec: pass http.clientIP through operation args

    @Hellzy
    Hellzy committed Nov 10, 2022
    Configuration menu
    Copy the full SHA
    f224b27 View commit details
    Browse the repository at this point in the history

  3. internal/appsec: pass htpt.client_ip address to the WAF

    @Hellzy
    Hellzy committed Nov 10, 2022
    Configuration menu
    Copy the full SHA
    c1c1364 View commit details
    Browse the repository at this point in the history

  4. internal/appsec: internal/appsec: add support for WAF actions 

    ASM now instanciates an action handler that will perform various
actions commanded by the WAF after a match is performed. The
"block_request" action type is the only kind of action currently
supported, allowing to block an HTTP request.
    @Hellzy
    Hellzy committed Nov 10, 2022
    Configuration menu
    Copy the full SHA
    566a6c5 View commit details
    Browse the repository at this point in the history

Commits on Nov 17, 2022

  1. internal/appsec/dyngo: write response header before body in blocking … 

    …action
    @Hellzy
    Hellzy committed Nov 17, 2022
    Configuration menu
    Copy the full SHA
    dea3413 View commit details
    Browse the repository at this point in the history

  2. internal/appsec/dyngo: clear actions/events before second waf run

    @Hellzy
    Hellzy committed Nov 17, 2022
    Configuration menu
    Copy the full SHA
    e6f2902 View commit details
    Browse the repository at this point in the history

Commits on Nov 21, 2022

  1. internal/appsec/httpsec: remove appsec build tag constraint for actions

    @Hellzy
    Hellzy committed Nov 21, 2022
    Configuration menu
    Copy the full SHA
    b7e1d8a View commit details
    Browse the repository at this point in the history

Commits on Nov 23, 2022

  1. Apply suggestions from code review 

    Co-authored-by: Julio Guerra <julio@datadog.com>
    @Hellzy @Julio-Guerra
    Hellzy and Julio-Guerra committed Nov 23, 2022
    Configuration menu
    Copy the full SHA
    733a143 View commit details
    Browse the repository at this point in the history

  2. internal/appsec/dyngo: simplify BlockRequestAction struct

    @Hellzy
    Hellzy committed Nov 23, 2022
    Configuration menu
    Copy the full SHA
    9f24219 View commit details
    Browse the repository at this point in the history

  3. internal/appsec: actionHandler.Apply returns true if blocking

    @Hellzy
    Hellzy committed Nov 23, 2022
    Configuration menu
    Copy the full SHA
    36db486 View commit details
    Browse the repository at this point in the history

  4. internal/appsec: add mutex for Operation actions

    @Hellzy
    Hellzy committed Nov 23, 2022
    Configuration menu
    Copy the full SHA
    17010e7 View commit details
    Browse the repository at this point in the history

  5. internal/appsec: add mutex for action handler

    @Hellzy
    Hellzy committed Nov 23, 2022
    Configuration menu
    Copy the full SHA
    aad08f8 View commit details
    Browse the repository at this point in the history

  6. internal/appsec: add RLock call to security events holder

    @Hellzy
    Hellzy committed Nov 23, 2022
    Configuration menu
    Copy the full SHA
    8a48b47 View commit details
    Browse the repository at this point in the history

  7. appsec: grpc: remove unary/stream handlers and use status code

    @Hellzy
    Hellzy committed Nov 23, 2022
    Configuration menu
    Copy the full SHA
    9f6411e View commit details
    Browse the repository at this point in the history

Commits on Nov 24, 2022

  1. internal/appsec: go lint

    @Hellzy
    Hellzy committed Nov 24, 2022
    Configuration menu
    Copy the full SHA
    4a75723 View commit details
    Browse the repository at this point in the history

  2. internal/appsec: move applyActions() to a dedicated function

    @Hellzy
    Hellzy committed Nov 24, 2022
    Configuration menu
    Copy the full SHA
    49a7c27 View commit details
    Browse the repository at this point in the history

  3. appsec: grpc: retrieve http.client_ip and use action handler

    @Hellzy
    Hellzy committed Nov 24, 2022
    Configuration menu
    Copy the full SHA
    4320cd0 View commit details
    Browse the repository at this point in the history

Commits on Dec 5, 2022

  1. internal/appsec: dyngo: use go embed for blocked response default tem… 

    …plates
    @Hellzy
    Hellzy committed Dec 5, 2022
    Configuration menu
    Copy the full SHA
    9663fac View commit details
    Browse the repository at this point in the history

Commits on Dec 6, 2022

  1. Merge branch 'main' into francois.mazeau/ip-blocking

    @Hellzy
    Hellzy committed Dec 6, 2022
    Configuration menu
    Copy the full SHA
    6c03b89 View commit details
    Browse the repository at this point in the history

  2. internal/appsec: defer wafCtx.Close()

    @Hellzy
    Hellzy committed Dec 6, 2022
    Configuration menu
    Copy the full SHA
    11a4cfb View commit details
    Browse the repository at this point in the history

Commits on Dec 7, 2022

  1. internal/appsec: add request blocking test case

    @Hellzy
    Hellzy committed Dec 7, 2022
    Configuration menu
    Copy the full SHA
    62e93b0 View commit details
    Browse the repository at this point in the history

  2. internal/appsec: golint

    @Hellzy
    Hellzy committed Dec 7, 2022
    Configuration menu
    Copy the full SHA
    ca98bff View commit details
    Browse the repository at this point in the history

Commits on Dec 8, 2022

  1. appsec: test grpc IP blocking

    @Hellzy
    Hellzy committed Dec 8, 2022
    Configuration menu
    Copy the full SHA
    e4379ba View commit details
    Browse the repository at this point in the history

  2. internal/appsec: fix content type when blocking

    @Hellzy
    Hellzy committed Dec 8, 2022
    Configuration menu
    Copy the full SHA
    2286b11 View commit details
    Browse the repository at this point in the history

  3. grpcsec: report the http.client_ip span tag

    @Julio-Guerra
    Julio-Guerra committed Dec 8, 2022
    Configuration menu
    Copy the full SHA
    9272678 View commit details
    Browse the repository at this point in the history

  4. grpcsec: report the http.client_ip span tag

    @Julio-Guerra
    Julio-Guerra committed Dec 8, 2022
    Configuration menu
    Copy the full SHA
    c7377af View commit details
    Browse the repository at this point in the history

Commits on Dec 9, 2022

  1. Merge branch 'main' into francois.mazeau/ip-blocking

    @Julio-Guerra
    Julio-Guerra committed Dec 9, 2022
    Configuration menu
    Copy the full SHA
    cf3ac2f View commit details
    Browse the repository at this point in the history

  2. internal/appsec: close waf ctx when blocking

    @Hellzy
    Hellzy committed Dec 9, 2022
    Configuration menu
    Copy the full SHA
    7f24120 View commit details
    Browse the repository at this point in the history

  3. internal/appsec: add actions_test.go

    @Hellzy
    Hellzy committed Dec 9, 2022
    Configuration menu
    Copy the full SHA
    71c6c73 View commit details
    Browse the repository at this point in the history

  4. internal/appsec: report private IP if no global IP found

    @Hellzy
    Hellzy committed Dec 9, 2022
    Configuration menu
    Copy the full SHA
    7281ec4 View commit details
    Browse the repository at this point in the history

  5. appsec: retrieve remote addr for grpc

    @Hellzy
    Hellzy committed Dec 9, 2022
    Configuration menu
    Copy the full SHA
    fde2717 View commit details
    Browse the repository at this point in the history

Commits on Dec 11, 2022

  1. github: update codeowners file to better cover appsec files in contrib

    @Julio-Guerra
    Julio-Guerra committed Dec 11, 2022
    Configuration menu
    Copy the full SHA
    a266362 View commit details
    Browse the repository at this point in the history

Commits on Dec 12, 2022

  1. appsec: fix client ip tags with peer ip addresses

    @Julio-Guerra
    Julio-Guerra committed Dec 12, 2022
    Configuration menu
    Copy the full SHA
    3d9d7d4 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'main' into francois.mazeau/ip-blocking

    @Julio-Guerra
    Julio-Guerra committed Dec 12, 2022
    Configuration menu
    Copy the full SHA
    e7a01b3 View commit details
    Browse the repository at this point in the history