We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent cfc4e06 commit 09e5c68Copy full SHA for 09e5c68
appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/CommonTests.groovy
@@ -325,6 +325,17 @@ trait CommonTests {
325
assert exploit.frames[3].line == 28
326
}
327
328
+ @Test
329
+ void 'multiple rasp'() {
330
+ def trace = container.traceFromRequest(
331
+ '/multiple_rasp.php?path=../somefile&other=../otherfile&domain=169.254.169.254') {HttpResponse<InputStream> resp ->
332
+ assert resp.statusCode() == 200
333
+ }
334
+
335
+ Span span = trace.first()
336
+ assert span.metrics."_dd.appsec.rasp.rule.eval" == 5.0d
337
338
339
@Test
340
void 'user blocking'() {
341
def trace = container.traceFromRequest('/user_id.php?id=user2020') { HttpResponse<InputStream> resp ->
0 commit comments