Extract Jersey json body response schemas #9014
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
jandro996 added type: enhancement jandro996 force-pushed the alejandro.gonzalez/api-sec-jersey-response-schema branch from 3c78ad2 to 2aeb457 Compare 
BenchmarksStartupParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 45 metrics, 8 unstable metrics. Startup time reports for petclinicgantt title petclinic - global startup overhead: candidate=1.51.0-SNAPSHOT~0e8d21806f, baseline=1.51.0-SNAPSHOT~640fc88be4 dateFormat X axisFormat %s section tracing Agent [baseline] (995.097 ms) : 0, 995097 Total [baseline] (10.536 s) : 0, 10535691 Agent [candidate] (995.476 ms) : 0, 995476 Total [candidate] (10.565 s) : 0, 10564912 section appsec Agent [baseline] (1.174 s) : 0, 1173561 Total [baseline] (10.707 s) : 0, 10707093 Agent [candidate] (1.174 s) : 0, 1173734 Total [candidate] (10.756 s) : 0, 10755575 section iast Agent [baseline] (1.131 s) : 0, 1130578 Total [baseline] (10.803 s) : 0, 10802810 Agent [candidate] (1.145 s) : 0, 1145143 Total [candidate] (10.882 s) : 0, 10882481 section profiling Agent [baseline] (1.253 s) : 0, 1252705 Total [baseline] (10.921 s) : 0, 10920633 Agent [candidate] (1.243 s) : 0, 1242878 Total [candidate] (10.944 s) : 0, 10944177
gantt title petclinic - break down per module: candidate=1.51.0-SNAPSHOT~0e8d21806f, baseline=1.51.0-SNAPSHOT~640fc88be4 dateFormat X axisFormat %s section tracing BytebuddyAgent [baseline] (686.756 ms) : 0, 686756 BytebuddyAgent [candidate] (687.215 ms) : 0, 687215 GlobalTracer [baseline] (242.319 ms) : 0, 242319 GlobalTracer [candidate] (242.445 ms) : 0, 242445 AppSec [baseline] (30.297 ms) : 0, 30297 AppSec [candidate] (30.173 ms) : 0, 30173 Debugger [baseline] (6.063 ms) : 0, 6063 Debugger [candidate] (6.0 ms) : 0, 6000 Remote Config [baseline] (670.375 µs) : 0, 670 Remote Config [candidate] (676.51 µs) : 0, 677 Telemetry [baseline] (8.227 ms) : 0, 8227 Telemetry [candidate] (8.197 ms) : 0, 8197 section appsec BytebuddyAgent [baseline] (710.17 ms) : 0, 710170 BytebuddyAgent [candidate] (709.853 ms) : 0, 709853 GlobalTracer [baseline] (235.21 ms) : 0, 235210 GlobalTracer [candidate] (235.364 ms) : 0, 235364 IAST [baseline] (21.953 ms) : 0, 21953 IAST [candidate] (21.91 ms) : 0, 21910 AppSec [baseline] (170.931 ms) : 0, 170931 AppSec [candidate] (171.199 ms) : 0, 171199 Debugger [baseline] (5.792 ms) : 0, 5792 Debugger [candidate] (5.816 ms) : 0, 5816 Remote Config [baseline] (626.301 µs) : 0, 626 Remote Config [candidate] (608.401 µs) : 0, 608 Telemetry [baseline] (8.112 ms) : 0, 8112 Telemetry [candidate] (8.178 ms) : 0, 8178 section iast BytebuddyAgent [baseline] (808.221 ms) : 0, 808221 BytebuddyAgent [candidate] (818.794 ms) : 0, 818794 GlobalTracer [baseline] (232.416 ms) : 0, 232416 GlobalTracer [candidate] (234.516 ms) : 0, 234516 IAST [baseline] (27.581 ms) : 0, 27581 IAST [candidate] (28.209 ms) : 0, 28209 AppSec [baseline] (27.451 ms) : 0, 27451 AppSec [candidate] (28.176 ms) : 0, 28176 Debugger [baseline] (5.789 ms) : 0, 5789 Debugger [candidate] (5.895 ms) : 0, 5895 Remote Config [baseline] (574.128 µs) : 0, 574 Remote Config [candidate] (586.982 µs) : 0, 587 Telemetry [baseline] (7.904 ms) : 0, 7904 Telemetry [candidate] (8.038 ms) : 0, 8038 section profiling BytebuddyAgent [baseline] (683.217 ms) : 0, 683217 BytebuddyAgent [candidate] (678.146 ms) : 0, 678146 GlobalTracer [baseline] (362.818 ms) : 0, 362818 GlobalTracer [candidate] (360.624 ms) : 0, 360624 AppSec [baseline] (34.017 ms) : 0, 34017 AppSec [candidate] (32.961 ms) : 0, 32961 Debugger [baseline] (6.951 ms) : 0, 6951 Debugger [candidate] (11.18 ms) : 0, 11180 Remote Config [baseline] (676.497 µs) : 0, 676 Remote Config [candidate] (661.248 µs) : 0, 661 Telemetry [baseline] (10.998 ms) : 0, 10998 Telemetry [candidate] (8.005 ms) : 0, 8005 ProfilingAgent [baseline] (104.417 ms) : 0, 104417 ProfilingAgent [candidate] (102.691 ms) : 0, 102691 Profiling [baseline] (104.442 ms) : 0, 104442 Profiling [candidate] (102.715 ms) : 0, 102715 Startup time reports for insecure-bankgantt title insecure-bank - global startup overhead: candidate=1.51.0-SNAPSHOT~0e8d21806f, baseline=1.51.0-SNAPSHOT~640fc88be4 dateFormat X axisFormat %s section tracing Agent [baseline] (1.003 s) : 0, 1002907 Total [baseline] (8.573 s) : 0, 8572650 Agent [candidate] (1.001 s) : 0, 1001117 Total [candidate] (8.602 s) : 0, 8602042 section iast Agent [baseline] (1.131 s) : 0, 1130677 Total [baseline] (9.298 s) : 0, 9298275 Agent [candidate] (1.13 s) : 0, 1130439 Total [candidate] (9.252 s) : 0, 9252232
gantt title insecure-bank - break down per module: candidate=1.51.0-SNAPSHOT~0e8d21806f, baseline=1.51.0-SNAPSHOT~640fc88be4 dateFormat X axisFormat %s section tracing BytebuddyAgent [baseline] (692.814 ms) : 0, 692814 BytebuddyAgent [candidate] (691.642 ms) : 0, 691642 GlobalTracer [baseline] (243.401 ms) : 0, 243401 GlobalTracer [candidate] (242.926 ms) : 0, 242926 AppSec [baseline] (30.659 ms) : 0, 30659 AppSec [candidate] (30.573 ms) : 0, 30573 Debugger [baseline] (6.106 ms) : 0, 6106 Debugger [candidate] (6.096 ms) : 0, 6096 Remote Config [baseline] (672.574 µs) : 0, 673 Remote Config [candidate] (685.301 µs) : 0, 685 Telemetry [baseline] (8.29 ms) : 0, 8290 Telemetry [candidate] (8.292 ms) : 0, 8292 section iast BytebuddyAgent [baseline] (807.284 ms) : 0, 807284 BytebuddyAgent [candidate] (807.903 ms) : 0, 807903 GlobalTracer [baseline] (232.53 ms) : 0, 232530 GlobalTracer [candidate] (232.462 ms) : 0, 232462 IAST [baseline] (27.229 ms) : 0, 27229 IAST [candidate] (26.77 ms) : 0, 26770 AppSec [baseline] (28.558 ms) : 0, 28558 AppSec [candidate] (28.429 ms) : 0, 28429 Debugger [baseline] (5.841 ms) : 0, 5841 Debugger [candidate] (5.741 ms) : 0, 5741 Remote Config [baseline] (584.601 µs) : 0, 585 Remote Config [candidate] (581.697 µs) : 0, 582 Telemetry [baseline] (7.997 ms) : 0, 7997 Telemetry [candidate] (7.883 ms) : 0, 7883 LoadParameters
See matching parameters
SummaryFound 2 performance improvements and 1 performance regressions! Performance is the same for 9 metrics, 12 unstable metrics.
Request duration reports for insecure-bankgantt title insecure-bank - request duration [CI 0.99] : candidate=1.51.0-SNAPSHOT~0e8d21806f, baseline=1.51.0-SNAPSHOT~01ada424eb dateFormat X axisFormat %s section baseline no_agent (4.251 ms) : 4204, 4298 . : milestone, 4251, iast (9.341 ms) : 9175, 9506 . : milestone, 9341, iast_FULL (13.978 ms) : 13695, 14261 . : milestone, 13978, iast_GLOBAL (9.853 ms) : 9683, 10022 . : milestone, 9853, profiling (8.698 ms) : 8557, 8839 . : milestone, 8698, tracing (7.624 ms) : 7517, 7732 . : milestone, 7624, section candidate no_agent (4.235 ms) : 4183, 4288 . : milestone, 4235, iast (9.076 ms) : 8931, 9222 . : milestone, 9076, iast_FULL (14.095 ms) : 13813, 14376 . : milestone, 14095, iast_GLOBAL (10.11 ms) : 9933, 10287 . : milestone, 10110, profiling (8.603 ms) : 8472, 8733 . : milestone, 8603, tracing (7.627 ms) : 7510, 7743 . : milestone, 7627,
Request duration reports for petclinicgantt title petclinic - request duration [CI 0.99] : candidate=1.51.0-SNAPSHOT~0e8d21806f, baseline=1.51.0-SNAPSHOT~01ada424eb dateFormat X axisFormat %s section baseline no_agent (37.217 ms) : 36920, 37515 . : milestone, 37217, appsec (47.392 ms) : 46971, 47813 . : milestone, 47392, code_origins (43.442 ms) : 43072, 43812 . : milestone, 43442, iast (44.004 ms) : 43626, 44383 . : milestone, 44004, profiling (48.986 ms) : 48550, 49423 . : milestone, 48986, tracing (45.2 ms) : 44817, 45582 . : milestone, 45200, section candidate no_agent (38.213 ms) : 37906, 38520 . : milestone, 38213, appsec (47.126 ms) : 46705, 47548 . : milestone, 47126, code_origins (45.831 ms) : 45421, 46240 . : milestone, 45831, iast (44.227 ms) : 43839, 44614 . : milestone, 44227, profiling (46.82 ms) : 46322, 47319 . : milestone, 46820, tracing (42.927 ms) : 42567, 43286 . : milestone, 42927,
DacapoParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics. Execution time for biojavagantt title biojava - execution time [CI 0.99] : candidate=1.51.0-SNAPSHOT~0e8d21806f, baseline=1.51.0-SNAPSHOT~640fc88be4 dateFormat X axisFormat %s section baseline no_agent (14.912 s) : 14912000, 14912000 . : milestone, 14912000, appsec (14.573 s) : 14573000, 14573000 . : milestone, 14573000, iast (18.56 s) : 18560000, 18560000 . : milestone, 18560000, iast_GLOBAL (18.001 s) : 18001000, 18001000 . : milestone, 18001000, profiling (15.131 s) : 15131000, 15131000 . : milestone, 15131000, tracing (14.83 s) : 14830000, 14830000 . : milestone, 14830000, section candidate no_agent (15.007 s) : 15007000, 15007000 . : milestone, 15007000, appsec (14.751 s) : 14751000, 14751000 . : milestone, 14751000, iast (17.957 s) : 17957000, 17957000 . : milestone, 17957000, iast_GLOBAL (17.853 s) : 17853000, 17853000 . : milestone, 17853000, profiling (15.183 s) : 15183000, 15183000 . : milestone, 15183000, tracing (15.005 s) : 15005000, 15005000 . : milestone, 15005000,
Execution time for tomcatgantt title tomcat - execution time [CI 0.99] : candidate=1.51.0-SNAPSHOT~0e8d21806f, baseline=1.51.0-SNAPSHOT~640fc88be4 dateFormat X axisFormat %s section baseline no_agent (1.485 ms) : 1473, 1496 . : milestone, 1485, appsec (2.42 ms) : 2372, 2469 . : milestone, 2420, iast (2.191 ms) : 2130, 2253 . : milestone, 2191, iast_GLOBAL (2.241 ms) : 2180, 2303 . : milestone, 2241, profiling (2.047 ms) : 1997, 2097 . : milestone, 2047, tracing (2.015 ms) : 1967, 2062 . : milestone, 2015, section candidate no_agent (1.485 ms) : 1474, 1497 . : milestone, 1485, appsec (2.417 ms) : 2368, 2466 . : milestone, 2417, iast (2.203 ms) : 2142, 2265 . : milestone, 2203, iast_GLOBAL (2.238 ms) : 2177, 2300 . : milestone, 2238, profiling (2.042 ms) : 1993, 2092 . : milestone, 2042, tracing (2.023 ms) : 1976, 2071 . : milestone, 2023,
|
jandro996 changed the title 
manuel-alvarez-alvarez force-pushed the malvarez/vertx-response-extraction branch 9 times, most recently from ac7c355 to bd96ea3 Compare 
jandro996 force-pushed the alejandro.gonzalez/api-sec-jersey-response-schema branch from 8e2219c to db61f58 Compare dd-smoke-tests/jersey-2/src/test/groovy/datadog/smoketest/Jersey2AppsecSmokeTest.groovy Show resolved Hide resolved
dd-smoke-tests/jersey-3/src/test/groovy/datadog/smoketest/Jersey3AppsecSmokeTest.groovy Show resolved Hide resolved
| @Advice.Argument(4) MediaType mediaType, | ||
| @ActiveRequestContext RequestContext reqCtx, | ||
| @Advice.Thrown Throwable t) { | ||
| if (t != null) { |
There was a problem hiding this comment.
I think we should be building method enter advices this cases, so we don´t write the response to the output (in case it needs to be blocked),
manuel-alvarez-alvarez approved these changes Jun 27, 2025
jandro996 added a commit that referenced this pull request Jul 3, 2025
What Does This Do Adds smoke test to probe that response body extraction for RestEasy JSON endpoints to enable automatic API schema discovery and protection by the Web Application Firewall (WAF) was covered with the instrumentation done in #9014 Jira ticket: APPSEC-57916
svc-squareup-copybara pushed a commit to cashapp/misk that referenced this pull request Jul 10, 2025
| Package | Type | Package file | Manager | Update | Change | |---|---|---|---|---|---| | [com.google.errorprone:error_prone_annotations](https://errorprone.info) ([source](https://github.com/google/error-prone)) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.39.0` -> `2.40.0` | | [org.apache.commons:commons-lang3](https://commons.apache.org/proper/commons-lang/) ([source](https://gitbox.apache.org/repos/asf/commons-lang.git)) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `3.17.0` -> `3.18.0` | | [org.jetbrains.kotlinx.binary-compatibility-validator](https://github.com/Kotlin/binary-compatibility-validator) | plugin | misk/gradle/libs.versions.toml | gradle | patch | `0.18.0` -> `0.18.1` | | [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.50.1` -> `1.51.0` | | [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:sqs](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | --- ### Release Notes <details> <summary>google/error-prone (com.google.errorprone:error_prone_annotations)</summary> ### [`v2.40.0`](https://github.com/google/error-prone/releases/tag/v2.40.0): Error Prone 2.40.0 Changes: - Bug fixes and improvements - Releases (including snapshots) have migrated from [OSSRH to the Central Publisher Portal](https://central.sonatype.org/pages/ossrh-eol/#process-to-migrate) Full changelog: google/error-prone@v2.39.0...v2.40.0 </details> <details> <summary>Kotlin/binary-compatibility-validator (org.jetbrains.kotlinx.binary-compatibility-validator)</summary> ### [`v0.18.1`](https://github.com/Kotlin/binary-compatibility-validator/releases/tag/0.18.1) [Compare Source](Kotlin/binary-compatibility-validator@0.18.0...0.18.1) #### What's Changed - Fixed a bug preventing use of cross-compilation support during KLIB dump validation \[[#​304](https://github.com/Kotlin/binary-compatibility-validator/issues/304)]\[[#​306](https://github.com/Kotlin/binary-compatibility-validator/issues/306)] </details> <details> <summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary> ### [`v1.51.0`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.51.0): 1.51.0 ### Components #### Application Security Management (IAST) - 🐛 Fix verify error when ctor params are used after a call site ([#​9083](DataDog/dd-trace-java#9083) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - 🐛 Limit the maximum size of the location path in IAST vulnerabilities ([#​9028](DataDog/dd-trace-java#9028) - [@​jandro996](https://github.com/jandro996)) - 🐛 Fix IAST gRPC handler with null superclass ([#​8984](DataDog/dd-trace-java#8984) - [@​smola](https://github.com/smola)) - ✨ Optimize IAST Vulnerability Detection ([#​8885](DataDog/dd-trace-java#8885) - [@​jandro996](https://github.com/jandro996)) #### Application Security Management (WAF) - ✨ Upgrade libddwaf-java to 15.0.0 ([#​9022](DataDog/dd-trace-java#9022) - [@​sezen-datadog](https://github.com/sezen-datadog)) - ✨ Extract RestEasy json body response schemas ([#​9015](DataDog/dd-trace-java#9015) - [@​jandro996](https://github.com/jandro996)) - ✨ Extract Jersey json body response schemas ([#​9014](DataDog/dd-trace-java#9014) - [@​jandro996](https://github.com/jandro996)) - ✨ Extract Ratpack json body response schemas ([#​9013](DataDog/dd-trace-java#9013) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Enable API Security by default and make it lazy loading ([#​9009](DataDog/dd-trace-java#9009) - [@​smola](https://github.com/smola)) - ✨ Extract Vert.x json body response schemas ([#​9001](DataDog/dd-trace-java#9001) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Extract Play json body response schemas ([#​8995](DataDog/dd-trace-java#8995) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - 🐛 Fix Jackson nodes introspection for request/response schema extraction ([#​8980](DataDog/dd-trace-java#8980) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Extract Spring json body response schemas ([#​8938](DataDog/dd-trace-java#8938) - [@​sezen-datadog](https://github.com/sezen-datadog)) - ✨ Default obfuscation regexp update ([#​8937](DataDog/dd-trace-java#8937) - [@​sezen-datadog](https://github.com/sezen-datadog)) #### Build & Tooling - ✨ Cancel GitLab running pipeline on new PR push ([#​9023](DataDog/dd-trace-java#9023) - [@​PerfectSlayer](https://github.com/PerfectSlayer)) - ✨ Migrate publishing to Maven Central Portal ([#​8807](DataDog/dd-trace-java#8807) - [@​sarahchen6](https://github.com/sarahchen6)) #### Continuous Integration Visibility - 🐛 Fix Test Optimization to work with JDK 24 ([#​9114](DataDog/dd-trace-java#9114) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Add repo root as safe directory on git client creation ([#​9033](DataDog/dd-trace-java#9033) - [@​daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Add PR number tag and improve PR information building ([#​8990](DataDog/dd-trace-java#8990) - [@​daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Update impacted tests logic ([#​8923](DataDog/dd-trace-java#8923) - [@​daniel-mohedano](https://github.com/daniel-mohedano)) #### Data Streams Monitoring - 🧹 Clean up DSM context injection ([#​8776](DataDog/dd-trace-java#8776) - [@​PerfectSlayer](https://github.com/PerfectSlayer)) #### Database Monitoring - 🐛 Set trace\_injected in try block ([#​9025](DataDog/dd-trace-java#9025) - [@​natashadada](https://github.com/natashadada)) #### Dynamic Instrumentation - 🐛 Add source file tracking enable option ([#​9115](DataDog/dd-trace-java#9115) - [@​jpbempel](https://github.com/jpbempel)) - ✨ Add java.util.Date support ([#​9111](DataDog/dd-trace-java#9111) - [@​jpbempel](https://github.com/jpbempel)) - ✨ Update file probe format ([#​9047](DataDog/dd-trace-java#9047) - [@​jpbempel](https://github.com/jpbempel)) - ✨ add safe local var hoisting ([#​9034](DataDog/dd-trace-java#9034) - [@​jpbempel](https://github.com/jpbempel)) - 🧹 Add new config for debugger upload interval ([#​8959](DataDog/dd-trace-java#8959) - [@​jpbempel](https://github.com/jpbempel)) - ✨ Enable Code Origin with Dynamic instrumentation ([#​8940](DataDog/dd-trace-java#8940) - [@​jpbempel](https://github.com/jpbempel)) #### ML Observability (LLMObs) - 💡 LLM Observability SDK ([#​8781](DataDog/dd-trace-java#8781) - [@​gary-huang](https://github.com/gary-huang), [@​nayeem-kamal](https://github.com/nayeem-kamal)) #### Metrics - 🐛 Ensure client stat reporter is started when the agent is not available at bootstrap ([#​9082](DataDog/dd-trace-java#9082) - [@​amarziali](https://github.com/amarziali)) - ✨ Create metric: appsec.waf.config\_errors ([#​8394](DataDog/dd-trace-java#8394) - [@​sezen-datadog](https://github.com/sezen-datadog)) #### Platform components - ✨ Introduce environment component ([#​9071](DataDog/dd-trace-java#9071) - [@​PerfectSlayer](https://github.com/PerfectSlayer)) #### Profiling - 🐛 Remove annoying warning for smap event parsing ([#​9119](DataDog/dd-trace-java#9119) - [@​jbachorik](https://github.com/jbachorik)) - 🐛 Fix ByteCountingInputStream when reading past EOF ([#​8988](DataDog/dd-trace-java#8988) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### Realtime User Monitoring - ✨ Add RUM SDK injection for servlet based web servers ([#​9110](DataDog/dd-trace-java#9110) - [@​PerfectSlayer](https://github.com/PerfectSlayer) [@​amarziali](https://github.com/amarziali)) #### Telemetry - ✨ Update the config origin metric to match what it's mapping ([#​9045](DataDog/dd-trace-java#9045) - [@​sezen-datadog](https://github.com/sezen-datadog)) #### Testing - ✨ Add testing for latest stable version (JDK 24) ([#​8875](DataDog/dd-trace-java#8875) - [@​sarahchen6](https://github.com/sarahchen6)) #### Trace context propagation - 🐛 Fix bug with dropping baggage when `TracePropagationBehaviorExtract=IGNORE` ([#​9037](DataDog/dd-trace-java#9037) - [@​mhlidd](https://github.com/mhlidd)) - 🐛 Fix ArrayIndexOutOfBoundsException in PercentEscaper ([#​9032](DataDog/dd-trace-java#9032) - [@​mhlidd](https://github.com/mhlidd)) #### Tracer core - 🐛 Fix `Error` handling for trace interceptors ([#​9097](DataDog/dd-trace-java#9097) - [@​AlexeyKuznetsov-DD](https://github.com/AlexeyKuznetsov-DD)) - 💡 Add wildcard feature for `DD_TRACE_HEADER_TAGS` and enabling for Http Response headers ([#​9067](DataDog/dd-trace-java#9067) - [@​mhlidd](https://github.com/mhlidd)) #### Tracer public API - 💡 Add LLM Observability SDK ([#​8781](DataDog/dd-trace-java#8781) - [@​gary-huang](https://github.com/gary-huang)) ### Instrumentations #### Akka instrumentation - 🐛 Fix NPE in akka-http and pekko-http integrations ([#​9019](DataDog/dd-trace-java#9019) - [@​mcculls](https://github.com/mcculls)) #### Eclipse Vert.x instrumentation - ✨ Extract Vert.x json body response schemas ([#​9001](DataDog/dd-trace-java#9001) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Write http.route tag as soon as possible in vert.x ([#​8952](DataDog/dd-trace-java#8952) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### JAX-WS instrumentation - 💡⚠️ Enable jax-ws integration by default ([#​9030](DataDog/dd-trace-java#9030) - [@​bm1549](https://github.com/bm1549)) - ✨ Extract Jersey json body response schemas ([#​9014](DataDog/dd-trace-java#9014) - [@​jandro996](https://github.com/jandro996)) #### Mule instrumentation - 🐛 Propagate grizzly http span in filters if nothing is active ([#​9016](DataDog/dd-trace-java#9016) - [@​amarziali](https://github.com/amarziali)) #### Play Framework instrumentation - ✨ Extract Play json body response schemas ([#​8995](DataDog/dd-trace-java#8995) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### Ratpack instrumentation - ✨ Extract Ratpack json body response schemas ([#​9013](DataDog/dd-trace-java#9013) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### Spring instrumentation - ✨ Extract Spring json body response schemas ([#​8938](DataDog/dd-trace-java#8938) - [@​sezen-datadog](https://github.com/sezen-datadog)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am every weekday" in timezone Australia/Melbourne, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). GitOrigin-RevId: 649b690d4c9d7dcb572c457f0802b42b8e3e682e
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit. This suggestion is invalid because no changes were made to the code. Suggestions cannot be applied while the pull request is closed. Suggestions cannot be applied while viewing a subset of changes. Only one suggestion per line can be applied in a batch. Add this suggestion to a batch that can be applied as a single commit. Applying suggestions on deleted lines is not supported. You must change the existing code in this line in order to create a valid suggestion. Outdated suggestions cannot be applied. This suggestion has been applied or marked resolved. Suggestions cannot be applied from pending reviews. Suggestions cannot be applied on multi-line comments. Suggestions cannot be applied while the pull request is queued to merge. Suggestion cannot be applied right now. Please check back later.
What Does This Do
Adds response body extraction for Jersey JSON endpoints to enable automatic API schema discovery and protection by the Web Application Firewall (WAF).
Motivation
Additional Notes
Contributor Checklist
type:and (comp:orinst:) labels in addition to any usefull labelsclose,fixor any linking keywords when referencing an issue.Use
solvesinstead, and assign the PR milestone to the issueJira ticket: APPSEC-57909