dd-trace-js
dd-trace-js copied to clipboard
WIP Rasp LFI first approach
What does this PR do?
WIP, at the moment:
- Define
AppsecFsPlugin
to identify root fs operations. - Instrument express
res.render
to allow rasp LFI component to exclude fs operations caused by view rendering.
Motivation
Plugin Checklist
- [ ] Unit tests.
- [ ] TypeScript definitions.
- [ ] TypeScript tests.
- [ ] API documentation.
- [ ] CircleCI jobs/workflows.
- [ ] Plugin is exported.