Code

Taint cookies and headers#3232

Code

Merged

CarlesDD merged 11 commits intomasterDataDog/dd-trace-js:masterfrom ccapell/taint-cookies-headersDataDog/dd-trace-js:ccapell/taint-cookies-headersCopy head branch name to clipboardJun 15, 2023

+320-22

Commits

Commits on Jun 15, 2023

• Taint cookies and headers

  CarlesDD

  committed
  9a6a5ab

  Copy full SHA for 9a6a5ab

• Bump minimum node version for v4 on cookie plugin test

  CarlesDD

  committed
  1ff24f4

  Copy full SHA for 1ff24f4

• Add test with latest node version for cookie plugin test

  CarlesDD

  committed
  0bcd24a

  Copy full SHA for 0bcd24a

• Provide iastContext from index when tainting headers

  CarlesDD

  committed
  17dc0c6

  Copy full SHA for 17dc0c6

• Add test for cookie tainting in taint tracking plugin

  CarlesDD

  committed
  f5a15f1

  Copy full SHA for f5a15f1

• Remove iast transaction after taint tracking plugin tests to avoid hiting setMaxTransactions in tests

  CarlesDD

  committed
  9db4cf0

  Copy full SHA for 9db4cf0

• Add test for taintObject with taintingKeys flag

  CarlesDD

  committed
  605b00e

  Copy full SHA for 605b00e

• Address header tainting test for keys shorter than 10 chars

  CarlesDD

  committed
  7212390

  Copy full SHA for 7212390

• Upgrade native-iast-taint-tracking to v1.5.0

  CarlesDD

  committed
  e670bdd

  Copy full SHA for e670bdd

• Rewrite expect in taint tracking plugin test

  CarlesDD

  committed
  7cd419e

  Copy full SHA for 7cd419e

• Fix tag requiring in IAST index

  CarlesDD

  committed
  5ead7ac

  Copy full SHA for 5ead7ac