dd-trace-java

dd-trace-java copied to clipboard

Fix the normalization of Where definitions

2

# What Does This Do Fix the normalization of Where definitions so that methods aren't instrumented multiple times accidentally - [ ] Format the title [according the contribution guidelines](https://github.com/DataDog/dd-trace-java/blob/master/CONTRIBUTING.md#title-format) -...

evanchooly

Propagate blocking exceptions from bytebuddy supressions

1

# What Does This Do Updates our exception handler so `datadog.appsec.api.blocking.BlockingException` can be propagated in our advices in order to effectively block attacks. # Motivation AppSec protection relies on the...

manuel-alvarez-alvarez

Update header injection exclusions (reduce false positives)

1

# What Does This Do Adds new exclusions for the header inject module: - `Transfer-Encoding`/`Content-Encoding`: when sources come from `Accept-Encoding` - `Pragma`: when sources come from `Cache-Control` - `Vary`: when...

manuel-alvarez-alvarez

Add taint propagation to the String replace, replaceFirst, replaceAll methods

1

# What Does This Do This adds the instrumentation to propagate the taint values through the methods of `String` called `replace`, `replaceFirst`, `replaceAll`. The approach is using a `CallSite.Around` to...

Mariovido

Attach stacktrace to IAST vulnerabilities

1

# What Does This Do Rework current stack trace utilities for RASP to: - Be accesible for IAST ( and other product in the future) - Add missing fields and...

jandro996

chore: prefix system tests env var

1

# What Does This Do Prefix system tests env var to not conflict with local dev env vars # Motivation # Additional Notes # Contributor Checklist - [ ] Format...

wconti27

Updating Span Link creation due to header tag propagations for invalid spans

1

# What Does This Do Updates the keys in the Span Link creation to include the `attributes` field and to only include `tracestate` when the propagation style is `tracecontext`. Additionally,...

mhlidd

Incorrect exec time for child spans when using completable future in spring controller

1

Hi, When diagnosing some performance issues, I noticed that the execution times for child spans in traces are incorrect for APIs that are implemented using Spring Async controller feature with...

VasaviMadhurima

Expand SSRF support in IAST to apache-httpclient, commons-httpclient and okhttp

1

# What Does This Do This changes the way of detecting an **SSRF** in the http client. In this PR we centralize inside the `HttpClientDecorator` the detection of the **SSRF**...

Mariovido

apply rate limit to queue events

1

# What Does This Do Avoids creating huge numbers of queue time events in degenerate cases. Typically we see a few hundred of these per recording. # Motivation # Additional...

richardstartin