Repository navigation
feat(serverless/appsec/httpsec): support additional body types - #19654
Conversation
Add support for `application/x-www-form-urlencoded` and `multipart/form-data` body Content-Types, and basic tests around the body parsing function.
7eb19a4 to
02cdfb5
Compare
02cdfb5 to
17a5842
Compare
Bloop Bleep... Dogbot HereRegression Detector ResultsRun ID: 26c1646a-21d1-44d1-aca5-01e075574409 ExplanationA regression test is an integrated performance test for Because a target's optimization goal performance in each experiment will vary somewhat each time it is run, we can only estimate mean differences in optimization goal relative to the baseline target. We express these differences as a percentage change relative to the baseline target, denoted "Δ mean %". These estimates are made to a precision that balances accuracy and cost control. We represent this precision as a 90.00% confidence interval denoted "Δ mean % CI": there is a 90.00% chance that the true value of "Δ mean %" is in that interval. We decide whether a change in performance is a "regression" -- a change worth investigating further -- if both of the following two criteria are true:
The table below, if present, lists those experiments that have experienced a statistically significant change in mean optimization goal performance between baseline and comparison SHAs with 90.00% confidence OR have been detected as newly erratic. Negative values of "Δ mean %" mean that baseline is faster, whereas positive values of "Δ mean %" mean that comparison is faster. Results that do not exhibit more than a ±5.00% change in their mean optimization goal are discarded. An experiment is erratic if its coefficient of variation is greater than 0.1. The abbreviated table will be omitted if no interesting change is observed. No interesting changes in experiment optimization goals with confidence ≥ 90.00% and |Δ mean %| ≥ 5.00%. Fine details of change detection per experiment.
|
Add support for `application/x-www-form-urlencoded` and `multipart/form-data` body Content-Types, and basic tests around the body parsing function.
What does this PR do?
Add support for
application/x-www-form-urlencodedandmultipart/form-databody Content-Types, and basic tests around the body parsing function.Motivation
This provides additional insight to the WAF.
Possible Drawbacks / Trade-offs
This is dropping/ignoring additional part-level headers in the
multipart/form-datacase, and there could be other ways to present the decoded multipart form data.Reviewer's Checklist
Triagemilestone is set.major_changelabel if your change either has a major impact on the code base, is impacting multiple teams or is changing important well-established internals of the Agent. This label will be use during QA to make sure each team pay extra attention to the changed behavior. For any customer facing change use a releasenote.changelog/no-changeloglabel has been applied.qa/skip-qalabel is not applied.team/..label has been applied, indicating the team(s) that should QA this change.need-change/operatorandneed-change/helmlabels have been applied.k8s/<min-version>label, indicating the lowest Kubernetes version compatible with this feature.