Merge pull request #4445 from DataDog/appsec-add-rasp-sqli-remote-capability

Add AppSec RASP SQLI remote capability

Author: y9v

lib/datadog/appsec/remote.rb

@@ -24,6 +24,7 @@ class << self
         CAP_ASM_CUSTOM_BLOCKING_RESPONSE  = 1 << 9   # supports custom http code or redirect sa blocking response
         CAP_ASM_TRUSTED_IPS               = 1 << 10  # supports trusted ip
         CAP_ASM_RASP_SSRF                 = 1 << 23  # support for server-side request forgery exploit prevention rules
+        CAP_ASM_RASP_SQLI                 = 1 << 21  # support for SQL injection exploit prevention rules
 
         # TODO: we need to dynamically add CAP_ASM_ACTIVATION once we support it
         ASM_CAPABILITIES = [
@@ -37,6 +38,7 @@ class << self
           CAP_ASM_CUSTOM_BLOCKING_RESPONSE,
           CAP_ASM_TRUSTED_IPS,
           CAP_ASM_RASP_SSRF,
+          CAP_ASM_RASP_SQLI,
         ].freeze
 
         ASM_PRODUCTS = [

sig/datadog/appsec/remote.rbs

@@ -31,6 +31,8 @@ module Datadog
 
       CAP_ASM_RASP_SSRF: Integer
 
+      CAP_ASM_RASP_SQLI: Integer
+
       ASM_CAPABILITIES: Array[Integer]
 
       ASM_PRODUCTS: ::Array[String]

spec/datadog/appsec/remote_spec.rb

@@ -20,7 +20,7 @@
       end
 
       it 'returns capabilities' do
-        expect(described_class.capabilities).to eq([4, 128, 16, 32, 64, 8, 256, 512, 1024, 8_388_608])
+        expect(described_class.capabilities).to eq([4, 128, 16, 32, 64, 8, 256, 512, 1024, 8_388_608, 2_097_152])
       end
     end
   end