feat: Introduced feature to restrict IAST with accounts with IAST_RESTRICTED mode - #286

Open

sumitsuthar wants to merge 140 commits into

mainfrom

restrict_iast_to_account

Commits on May 15, 2024

logger for transaction errors
sumitsuthar
committed
d0fc7cc

Commits on May 16, 2024

exception report generation
sumitsuthar
committed
7ecdf28

Commits on May 20, 2024

hanlding to send application error json
sumitsuthar
committed
43f832d
clean up
sumitsuthar
committed
77fab60
Merge branch 'main' into error_reporting
sumitsuthar
authored
82554f8

Commits on May 23, 2024

added accountId and jsonName update
sumitsuthar
committed
a4a6953
minor fix
sumitsuthar
committed
a77f3f8
Merge branch 'error_reporting' of https://github.com/newrelic/csec-node-agent into error_reporting
sumitsuthar
committed
54f75be
minor fix
sumitsuthar
committed
6199cf4
added accountId
sumitsuthar
committed
e25a838

Commits on May 27, 2024

handling to collect and report uncaught exception
sumitsuthar
committed
d6007f6
handling to exit the process manually
sumitsuthar
committed
8c9785f

Commits on May 28, 2024

updated jsonName and added type
sumitsuthar
committed
c037400
minor fix
sumitsuthar
committed
bc04e3e
fix
sumitsuthar
committed
5bf7fb4
Implemented exception reporting schedular
sumitsuthar
committed
ae36eed
code refactor
sumitsuthar
committed
2eeb747

Commits on Jun 3, 2024

Merge branch 'main' into error_reporting
sumitsuthar
authored
f7a3558

Commits on Jun 5, 2024

Handling to report 5xx errors and added category
sumitsuthar
committed
365d89b

Commits on Jun 6, 2024

Updated secure cookie event generation
sumitsuthar
committed
c73b453
updated stacktrace to stackTrace
sumitsuthar
committed
864d43b

Commits on Jun 7, 2024

Merge branch 'error_reporting' into secure_cookie_event_update
sumitsuthar
committed
669f466

Commits on Jul 3, 2024

added key identifier
sumitsuthar
committed
3a0ae68

Commits on Jul 12, 2024

added key identifier
sumitsuthar
committed
fcdcf30

Commits on Jul 16, 2024

merge fix
sumitsuthar
committed
7650496
cleanup
sumitsuthar
committed
ed4c88e
Merge branch 'main' into key_identifier
sumitsuthar
authored
41d44c9
Merge branch 'main' into secure_cookie_event_update
sumitsuthar
authored
e476e06

Commits on Jul 18, 2024

Handlle empty data in fuzz header
sumitsuthar
committed
dcf4a10

Commits on Jul 31, 2024

Handling to read iast_test_identifier
sumitsuthar
committed
555b266

Commits on Aug 2, 2024

test identifier in auth header
sumitsuthar
committed
41b7fcc

Commits on Aug 5, 2024

naming update for test identifier
sumitsuthar
committed
ec7f9cd
updated json version
sumitsuthar
committed
efdaf6d

Commits on Aug 7, 2024

Handling to send process start time in ws
sumitsuthar
committed
7195ff5
added key identifier in hc
sumitsuthar
committed
b596a0c
Merge branch 'key_identifier' into empty_fuzz_header
sumitsuthar
committed
bee36dd
code cleanup
sumitsuthar
committed
3e201ae

Commits on Aug 12, 2024

Merge branch 'empty_fuzz_header' into secure_cookie_event_update
sumitsuthar
committed
76a0984
json version update
sumitsuthar
committed
f12e724
handling for delay and duration
sumitsuthar
committed
949c844
handling to disable websocket and agent
sumitsuthar
committed
67de57b
handling to disable detection category
sumitsuthar
committed
d355a0d
minor fix
sumitsuthar
committed
603b41b
Revert "minor fix"
sumitsuthar
committed
d0fa11e
Revert "handling to disable detection category"
sumitsuthar
committed
a6a9862
minor fix
sumitsuthar
committed
b4d9d8e
Revert "minor fix"
sumitsuthar
committed
f8e32ea
handling to disable detection category
sumitsuthar
committed
5b75921
asserts added
sumitsuthar
committed
b8349d5
Merge branch 'restrict_iast' of https://github.com/newrelic/csec-node-agent into restrict_iast
sumitsuthar
committed
acc9899

Commits on Aug 13, 2024

Handling to skip APIs for event generationg
sumitsuthar
committed
113c705

Commits on Aug 16, 2024

Commits on Aug 20, 2024

Added cron express parsing
sumitsuthar
committed
5498daf
handling for 0 or negative value in duration
sumitsuthar
committed
1616040
support for always_sample_traces flag
sumitsuthar
committed
b13e7fd

Commits on Aug 23, 2024

config update
sumitsuthar
committed
27c7a35

Commits on Aug 28, 2024

scan rate limit implementation
sumitsuthar
committed
41df8ca

Commits on Aug 30, 2024

minor fix
sumitsuthar
committed
7646a9d
minor fix
sumitsuthar
committed
01637b3

Commits on Sep 2, 2024

json version update
sumitsuthar
committed
c4a9f2e
added test identifier in hc
sumitsuthar
committed
2fdfa50
Merge branch 'empty_fuzz_header' into ci_support
sumitsuthar
committed
78600b7
merge iast schedular changes
sumitsuthar
committed
5e4736d
added scan start time
sumitsuthar
committed
1ea8965
scan controllers config added
sumitsuthar
committed
965e9a5
Merge branch 'restrict_iast' into ci_support
sumitsuthar
committed
331f7ff
added ws header NR-CSEC-IAST-SCAN-INSTANCE-COUNT
sumitsuthar
committed
e7a1f6d

Commits on Sep 3, 2024

scan start time update
sumitsuthar
committed
89f082b

Commits on Sep 4, 2024

json version update to 1.2.7
sumitsuthar
committed
bddafac

Commits on Sep 6, 2024

update in scan rate limit flag
sumitsuthar
committed
2192610

Commits on Sep 9, 2024

Handling to parse query strings and path
sumitsuthar
committed
c88b290
Handling to parse interception request headers for account restriction
sumitsuthar
committed
e671ebf
scan rate limit flag update
sumitsuthar
committed
cb69c62

Commits on Sep 10, 2024

Implementation to parse json body and check for account restriction
sumitsuthar
committed
a54a034
minor fix
sumitsuthar
committed
61a87fd

Commits on Sep 11, 2024

Updated json parsing and pair map
sumitsuthar
committed
d5e6d38
Implementation to parse and restrict x form url encode request body
sumitsuthar
committed
5290b73

Commits on Sep 12, 2024

Implementation to parse xml body and generate key value pairs
sumitsuthar
committed
de3119d
restriction utils added
sumitsuthar
committed
44c77ad

Commits on Sep 13, 2024

check to restrict secrity event
sumitsuthar
committed
03aef07
cleanup for iast restrictions
sumitsuthar
committed
e53a716

Commits on Sep 16, 2024

Updated default config of IAST_RESTRICTED mode
sumitsuthar
committed
4875b3f

Commits on Sep 19, 2024

Commits on Sep 20, 2024

resolved merge conflict
sumitsuthar
committed
831e805

Commits on Sep 21, 2024

udpated jsonVersion to 1.2.9
sumitsuthar
committed
ac77285
fix for exclusion based on regex
sumitsuthar
committed
54dec2f

Commits on Sep 25, 2024

Merge branch 'main' into restrict_iast
sumitsuthar
authored
4c50b6e

Commits on Sep 26, 2024

added handling to log delay scan time and iast data pull request time
sumitsuthar
committed
6d0cd8b
debug log added
sumitsuthar
committed
ca280eb
minor fix
sumitsuthar
committed
b75bc16
remove logger for scan delay
sumitsuthar
committed
09567c5

Commits on Oct 3, 2024

added handling to parse duration and delay to integer
sumitsuthar
committed
5083e47
disable agent if cron expression is wrong
sumitsuthar
committed
868ef8a
calling utility to shutdonw agent
sumitsuthar
committed
34cbed7
log the delay message if the delay is greater than 0
sumitsuthar
committed
1d4ec8a
fix to log schedule config if non empty
sumitsuthar
committed
f792ba3
Added log for agent shutdown message
sumitsuthar
committed
e3161c7
minor log update
sumitsuthar
committed
65a2b21
spell fix
sumitsuthar
committed
80b4603
delay parsing udpate
sumitsuthar
committed
650c311
added logger for SA config
sumitsuthar
committed
0782669
updates to main config for delay and duration
sumitsuthar
committed
d33af09
log only when duration is greater than 1
sumitsuthar
committed
8de9a11
minor space fix
sumitsuthar
committed
e2654da

Commits on Oct 4, 2024

Handling to generate event if allow sample flag is true regardless of duration and agent session fix
sumitsuthar
committed
0f5c084

Commits on Oct 7, 2024

fix for delay flag
sumitsuthar
committed
970eda6
cron express fix of ?
sumitsuthar
committed
a444a61
fix for invocation of duration and cron
sumitsuthar
committed
09fa058
added logger for hibernate mode
sumitsuthar
committed
3902546
Handling to not start agent until the cron expression time
sumitsuthar
committed
48cab39
fix for cron
sumitsuthar
committed
6451226
handling to store request if agent is in active mode
sumitsuthar
committed
1e189ae

Commits on Oct 8, 2024

updated rxss detection condition
pratik-k2
committed
3d81aa4
formatting fix
sumitsuthar
committed
c4c2e4d
fix for schedule with duration
sumitsuthar
committed
b615f14
fix for schedule with duration
sumitsuthar
committed
3b99d40
fix for delay as priority over schedule
sumitsuthar
committed
0373daa
minor fix for dual calling of durationConfig
sumitsuthar
committed
d82f1ce
code refactoring
sumitsuthar
committed
1f76419

Commits on Oct 9, 2024

updated logic to include query param
sumitsuthar
committed
152da07
update log for exclude API
sumitsuthar
committed
15cfbac
merge changes of restrict_iast_update
sumitsuthar
committed
b7c50f2

Commits on Oct 10, 2024

fix for scan rate limit
sumitsuthar
committed
bfff1b1
Merge branch 'restrict_iast_update' into ci_support
sumitsuthar
committed
3fcc552
scan instance count parsing
sumitsuthar
committed
6c62154
fix for scan rate limit
sumitsuthar
committed
18f9c3c
fix for negative number
sumitsuthar
committed
3f62989
minor fix
sumitsuthar
committed
17b6fe4
Merge branch 'restrict_iast_update' into ci_support
sumitsuthar
committed
3f90f6a

Commits on Oct 11, 2024

minor logging update
sumitsuthar
committed
df15279

Commits on Oct 17, 2024

merged ci/cd and restrit_iast_update branch
sumitsuthar
committed
c34ca12

Commits on Feb 6, 2025

merged main
sumitsuthar
committed
7a31811
handling to send skipScanParamters in event for IAST_RESTRICTED mode
sumitsuthar
committed
e46e050