Contents

# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
# frozen_string_literal: true

cs__scoped_require 'contrast/agent/assess/policy/trigger_validation/ssrf_validator'
cs__scoped_require 'contrast/agent/assess/policy/trigger_validation/xss_validator'

module Contrast
  module Agent
    module Assess
      module Policy
        # Some of our triggers require transformation or validation prior to
        # reporting in order to account for false positives or other aberrant
        # conditions. This provides a single place from which those validations
        # can be called.
        module TriggerValidation
          VALIDATORS = [
            Contrast::Agent::Assess::Policy::TriggerValidation::SSRFValidator,
            Contrast::Agent::Assess::Policy::TriggerValidation::XSSValidator
          ].cs__freeze

          def self.valid? patcher, object, ret, args
            VALIDATORS.each do |validator|
              return false unless validator.valid?(patcher, object, ret, args)
            end
            true
          end
        end
      end
    end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
contrast-agent-3.8.5	lib/contrast/agent/assess/policy/trigger_validation/trigger_validation.rb
contrast-agent-3.8.4	lib/contrast/agent/assess/policy/trigger_validation/trigger_validation.rb