v4.3.0 proposal #3267
Merged
v4.3.0 proposal #3267
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
* Unvalidated redirect analyzer * Ignore tainteds from Referer header
* add v0 naming to tedious (mssql) * add v1 naming to tedious (mssql) * switch to a mostly working test sqlserver The standard mssql server image does not work on ARM [1]. Instead, we use `azure-sql-edge` [2], which provides a sufficient subset of mssql server API to test most of our integration. Unfortunately, this image does not support stored procedures [3], so tests related to these will still fail locally. [1] microsoft/mssql-docker#668 [2] https://hub.docker.com/_/microsoft-azure-sql-edge [3] https://learn.microsoft.com/en-us/azure/azure-sql-edge/features#unsupported-features
* add v0 naming to mysql integrations * add v1 to mysql integrations * add tests on v1 for mysql databases --------- Co-authored-by: Thomas Hunter II <[email protected]>
* Taint cookies and headers * Bump minimum node version for v4 on cookie plugin test * Add test with latest node version for cookie plugin test * Provide iastContext from index when tainting headers * Add test for cookie tainting in taint tracking plugin * Remove iast transaction after taint tracking plugin tests to avoid hiting setMaxTransactions in tests * Add test for taintObject with taintingKeys flag * Address header tainting test for keys shorter than 10 chars * Upgrade native-iast-taint-tracking to v1.5.0 * Rewrite expect in taint tracking plugin test * Fix tag requiring in IAST index
--------- Co-authored-by: Thomas Hunter II <[email protected]>
* Add sources tests * styles
* appsec-iast benchmark tests * writing fixes Co-authored-by: simon-id <[email protected]> * small fixes --------- Co-authored-by: simon-id <[email protected]>
* Reduce request per iteration in IAST benchmarks * Reduce a bit more * 30 iterations 200 requests
* Add debug log listing found source maps * Bump pprof required version Use pprof version with source map debug info. Lock pprof version in package.json to be make sure that customers use a dd-trace-js/pprof-nodejs combination that is well tested.
Overall package sizeSelf size: 4.39 MB Dependency sizes
🤖 This report was automatically generated by heaviest-objects-in-the-universe |
Codecov Report
@@ Coverage Diff @@
## v4.x #3267 +/- ##
=======================================
Coverage ? 86.07%
=======================================
Files ? 194
Lines ? 7524
Branches ? 33
=======================================
Hits ? 6476
Misses ? 1048
Partials ? 0 📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more |
For each new push on master, publish a new injection image with tag "dev". We need to tag master branch with `dev` tag to trigger the `deploy_to_docker_registries` job in gitlab CI.
nsavoire
force-pushed
the
v4.3.0-proposal
branch
from
2ce5ce7 to
212b7ad
Compare
juan-fernandez
previously approved these changes
Jun 22, 2023
Collaborator
juan-fernandez
left a comment
juan-fernandez
left a comment
There was a problem hiding this comment.
looks good from ci visibility's perspective
uurien
previously approved these changes
Jun 22, 2023
…'ll throw whatever is thrown by the handler
nsavoire
force-pushed
the
v4.3.0-proposal
branch
from
212b7ad to
65af306
Compare
uurien
previously approved these changes
Jun 23, 2023
rochdev
previously approved these changes
Jun 23, 2023
nsavoire
force-pushed
the
v4.3.0-proposal
branch
from
65af306 to
2b8b1b7
Compare
uurien
approved these changes
Jun 23, 2023
Member
|
We're going to ignore the perf regressions for this release. One of them is for the upgraded version of the semver package in yarn.lock as customers installing via |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Features
Improvements
_dd.iast.enabled=1metric out of request vulnerabilities tags (Add _dd.iast.enabled=1 metric out of request vulnerabilities tags #3231)Bug Fixes
metrics.spec.jstests (part of tracing tests) for windows #3250)storehas value before use it (Checkstorehas value before use it #3257)