Code

Exploit prevention SQLi in pg#4566

Code

Merged

uurien merged 28 commits intomasterDataDog/dd-trace-js:masterfrom ugaitz/rasp-sql-pgDataDog/dd-trace-js:ugaitz/rasp-sql-pgCopy head branch name to clipboardSep 11, 2024

+1,527-410

Commits

Commits on Aug 1, 2024

• pg query with abortcontroller

  uurien

  committed
  daefc81

Commits on Aug 2, 2024

• Adding instrumentation tests

  uurien

  committed
  d46be5e

• Changing instrumentation for query object and adding tests

  uurien

  committed
  4dd4685

• Add tests for pg.pool

  uurien

  committed
  15ede9b

• Implement abortController for pg.pool

  uurien

  committed
  a8906cf

Commits on Aug 5, 2024

• Call to waf with pg query

  uurien

  committed
  6145de2

• Add pg.Pool blocking tests

  uurien

  committed
  56014d6

Commits on Aug 6, 2024

• Analyze also in pg.Pool and ignore pg.Client when it is already analyzed

  uurien

  committed
  3570cec

• Refactor - split rasp.js and move it to rasp directory

  uurien

  committed
  dc1cbd6

• Add integration tests for pg and unhandled promise

  uurien

  committed
  c7b82f9

Commits on Aug 7, 2024

• Cleaning code

  uurien

  committed
  3c48698

• Add timeout to integration tests

  uurien

  committed
  ff05f99

Commits on Aug 8, 2024

• Small fix in test

  uurien

  committed
  48b39ff

• Add new integration test

  uurien

  committed
  0d8920c

Commits on Sep 2, 2024

• Merge branch 'master' into ugaitz/rasp-sql-pg

  uurien

  authored
  a9c48b3

Commits on Sep 3, 2024

• Apply some PR suggestions

  uurien

  committed
  d77f60a

Commits on Sep 5, 2024

• Change approach to prevent double calls

  uurien

  committed
  a3ea4fc

• Merge branch 'master' into ugaitz/rasp-sql-pg

  uurien

  authored
  4da334c

• Do not prevent double calls if an input address is updated between calls

  uurien

  committed
  35763ec

Commits on Sep 6, 2024

• Small fixes

  uurien

  committed
  03a9435

• Merge branch 'master' into ugaitz/rasp-sql-pg

  uurien

  committed
  a8902c5

Commits on Sep 9, 2024

• Do not use Array.concat

  uurien

  committed
  636b3ed

• Use assert instead of checking error message manually

  uurien

  committed
  3b111f5

• require missing assert

  uurien

  committed
  70f195d

• Apply comments in the PR

  uurien

  committed
  efa203a

Commits on Sep 11, 2024

• Update packages/dd-trace/test/appsec/waf/waf_context_wrapper.spec.js

  Show description for 38c56cf
  

  uurien

  and

  simon-id

  authored
  38c56cf

• Merge branch 'master' into ugaitz/rasp-sql-pg

  uurien

  committed
  698e1b8

• Update packages/dd-trace/test/appsec/rasp/sql_injection.spec.js

  Show description for d93eabe
  

  uurien

  and

  simon-id

  authored
  d93eabe