Sha256: 839febb8876a10bc8ca9f191fa1d879ecc2dd150848a973c95a3740c7199e053

Contents?: true

Size: 1.29 KB

Versions: 5

Compression:

Stored size: 1.29 KB

Contents

# frozen_string_literal: true

module Datadog
  module AppSec
    module Contrib
      module Rack
        module Reactive
          # Dispatch data from a Rack request to the WAF context
          module RequestBody
            ADDRESSES = [
              'request.body',
            ].freeze
            private_constant :ADDRESSES

            def self.publish(op, gateway_request)
              catch(:block) do
                # params have been parsed from the request body
                op.publish('request.body', gateway_request.form_hash)

                nil
              end
            end

            def self.subscribe(op, waf_context)
              op.subscribe(*ADDRESSES) do |*values|
                Datadog.logger.debug { "reacted to #{ADDRESSES.inspect}: #{values.inspect}" }
                body = values[0]

                persistent_data = {
                  'server.request.body' => body,
                }

                waf_timeout = Datadog.configuration.appsec.waf_timeout
                result = waf_context.run(persistent_data, {}, waf_timeout)

                next if result.status != :match

                yield result
                throw(:block, true) unless result.actions.empty?
              end
            end
          end
        end
      end
    end
  end
end

Version data entries

5 entries across 5 versions & 1 rubygems

Version Path
datadog-2.8.0 lib/datadog/appsec/contrib/rack/reactive/request_body.rb
datadog-2.7.1 lib/datadog/appsec/contrib/rack/reactive/request_body.rb
datadog-2.7.0 lib/datadog/appsec/contrib/rack/reactive/request_body.rb
datadog-2.6.0 lib/datadog/appsec/contrib/rack/reactive/request_body.rb
datadog-2.5.0 lib/datadog/appsec/contrib/rack/reactive/request_body.rb