DataDog / dd-trace-java

Datadog APM client for Java

https://docs.datadoghq.com/tracing/languages/java

Apache License 2.0

572 stars 284 forks source link

Add SHI exploit prevention support #7615

Open jandro996 opened 2 weeks ago

jandro996 commented 2 weeks ago

What Does This Do

Motivation

Additional Notes

Contributor Checklist

[ ] Format the title according the contribution guidelines
[ ] Assign the type: and (comp: or inst:) labels in addition to any usefull labels
[ ] Squash your commits prior merging or merge using GitHub's Squash and merge
[ ] Don't use close, fix or any linking keywords when referencing an issue.
Use solves instead, and assign the PR milestone to the issue
[ ] Update the public documentation in case of new configuration flag or behavior

Jira ticket: [PROJ-IDENT]

jandro996 commented 2 weeks ago

Blocked! At this momento WAF shell injection detection rule available has been designed to specifically target functions which are explicitly or implicitly calling a shell such as /bin/sh or otherwise We also need support for String[] as the best place to call the WAF is reusing ProcessImplInstrumentation instead of the CallSites