Contents

# typed: true

module Datadog
  module AppSec
    module Contrib
      module Rack
        # Normalized extration of data from Rack::Request
        module Request
          def self.query(request)
            # Downstream libddwaf expects keys and values to be extractable
            # separately so we can't use [[k, v], ...]. We also want to allow
            # duplicate keys, so we use [{k, v}, ...] instead.
            request.query_string.split('&').map do |e|
              k, v = e.split('=').map { |s| CGI.unescape(s) }

              { k => v }
            end
          end

          # Rack < 2.0 does not have :each_header
          # TODO: We need access to Rack here. We must make sure we are able to load AppSec without Rack,
          # TODO: while still ensure correctness in ths code path.
          if defined?(::Rack) && ::Rack::Request.instance_methods.include?(:each_header)
            def self.headers(request)
              request.each_header.each_with_object({}) do |(k, v), h|
                h[k.gsub(/^HTTP_/, '').downcase.tr('_', '-')] = v if k =~ /^HTTP_/
              end
            end
          else
            def self.headers(request)
              request.env.each_with_object({}) do |(k, v), h|
                h[k.gsub(/^HTTP_/, '').downcase.tr('_', '-')] = v if k =~ /^HTTP_/
              end
            end
          end

          def self.body(request)
            request.body.read.tap { request.body.rewind }
          end

          def self.url(request)
            request.url
          end

          def self.cookies(request)
            request.cookies
          end

          def self.form_hash(request)
            # force form data processing
            request.POST if request.form_data?

            # usually Hash<String,String> but can be a more complex
            # Hash<String,String||Array||Hash> when e.g coming from JSON
            request.env['rack.request.form_hash']
          end
        end
      end
    end
  end
end

Version data entries

4 entries across 4 versions & 1 rubygems

Version	Path
ddtrace-1.6.1	lib/datadog/appsec/contrib/rack/request.rb
ddtrace-1.6.0	lib/datadog/appsec/contrib/rack/request.rb
ddtrace-1.5.2	lib/datadog/appsec/contrib/rack/request.rb
ddtrace-1.5.1	lib/datadog/appsec/contrib/rack/request.rb