httpsec

Documentation

Index

• func ClientIPTags(headers map[string][]string, hasCanonicalHeaders bool, remoteAddr string) (tags map[string]string, clientIP netip.Addr)
• func NewHTTPSecFeature(config *config.Config, rootOp dyngo.Operation) (listener.Feature, error)
• func NewSSRFProtectionFeature(config *config.Config, rootOp dyngo.Operation) (listener.Feature, error)
• func NormalizeHTTPHeaders(headers map[string][]string) (normalized map[string]string)
• type Feature
  • func (feature *Feature) OnRequest(op *httpsec.HandlerOperation, args httpsec.HandlerOperationArgs)
  • func (feature *Feature) OnResponse(op *httpsec.HandlerOperation, resp httpsec.HandlerOperationRes)
  • func (*Feature) Stop()
  • func (*Feature) String() string
• type SSRFProtectionFeature
  • func (*SSRFProtectionFeature) OnStart(op *httpsec.RoundTripOperation, args httpsec.RoundTripOperationArgs)
  • func (*SSRFProtectionFeature) Stop()
  • func (*SSRFProtectionFeature) String() string

Functions

func ClientIPTags

func ClientIPTags(headers map[string][]string, hasCanonicalHeaders bool, remoteAddr string) (tags map[string]string, clientIP netip.Addr)

ClientIPTags returns the resulting Datadog span tags `http.client_ip` containing the client IP and `network.client.ip` containing the remote IP. The tags are present only if a valid ip address has been returned by RemoteAddr().

func NewHTTPSecFeature

func NewHTTPSecFeature(config *config.Config, rootOp dyngo.Operation) (listener.Feature, error)

func NewSSRFProtectionFeature

func NewSSRFProtectionFeature(config *config.Config, rootOp dyngo.Operation) (listener.Feature, error)

func NormalizeHTTPHeaders

func NormalizeHTTPHeaders(headers map[string][]string) (normalized map[string]string)

NormalizeHTTPHeaders returns the HTTP headers following Datadog's normalization format.

Types

type Feature

type Feature struct {
	APISec appsec.APISecConfig
}

func (*Feature) OnRequest

func (feature *Feature) OnRequest(op *httpsec.HandlerOperation, args httpsec.HandlerOperationArgs)

func (*Feature) OnResponse

func (feature *Feature) OnResponse(op *httpsec.HandlerOperation, resp httpsec.HandlerOperationRes)

func (*Feature) Stop

func (*Feature) Stop()

func (*Feature) String

func (*Feature) String() string

type SSRFProtectionFeature

type SSRFProtectionFeature struct{}

func (*SSRFProtectionFeature) OnStart

func (*SSRFProtectionFeature) OnStart(op *httpsec.RoundTripOperation, args httpsec.RoundTripOperationArgs)

func (*SSRFProtectionFeature) Stop

func (*SSRFProtectionFeature) Stop()

func (*SSRFProtectionFeature) String

func (*SSRFProtectionFeature) String() string