When the secuirity agent is enabled, the excludes stanza for class_transformer doesn't get parsed correctly - Githubissues

newrelic / newrelic-java-agent

The New Relic Java agent

Apache License 2.0

202 stars 143 forks source link

When the secuirity agent is enabled, the excludes stanza for class_transformer doesn't get parsed correctly #1917

Closed jtduffy closed 4 months ago

jtduffy commented 5 months ago

Description

With the security agent enabled, the following config property is parsed incorrectly:

  class_transformer:
    excludes:
      org/h2/jdbc/JdbcConnection,
      org/h2/jdbc/JdbcPreparedStatement,
      org/h2/server/web/WebServlet,

When adding security specific class transformer excludes, it adds the user defined excludes incorrectly. This is the broken code.

It doesn't tokenize on the , character
It doesn't convert the entry into a regular expression, which is required.

This needs to be updated to use the standard excludes parsing/conversion logic.

Expected Behavior

Parse the excludes config stanza correctly.

workato-integration[bot] commented 5 months ago

https://new-relic.atlassian.net/browse/NR-275964