Default obfuscation regexp update #8937

sezen-datadog · 2025-06-06T07:51:28Z

What Does This Do

Updates libddwaf-java version to have the new regex key for obfuscation

Motivation

Additional Notes

Contributor Checklist

Format the title according the contribution guidelines
Assign the type: and (comp: or inst:) labels in addition to any usefull labels
Don't use close, fix or any linking keywords when referencing an issue.
Use solves instead, and assign the PR milestone to the issue
Update the CODEOWNERS file on source file addition, move, or deletion
Update the public documentation in case of new configuration flag or behavior

Jira ticket: APPSEC-57270

dd-java-agent/appsec/src/jmh/java/datadog/appsec/benchmark/WafBenchmark.java

pr-commenter · 2025-06-23T11:35:09Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	sezen.leblay/APPSEC-57270-default-regex-change
git_commit_date	1750764487	1750765641
git_commit_sha	`d78bb4d`	`6e43ba5`
release_version	1.51.0-SNAPSHOT~d78bb4d2b2	1.51.0-SNAPSHOT~6e43ba5cce

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1750767382	1750767382
ci_job_id	995547169	995547169
ci_pipeline_id	68584674	68584674
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-bziamzy-project-304-concurrent-0-8v114dfi 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-bziamzy-project-304-concurrent-0-8v114dfi 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module	Agent	Agent
parent	None	None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 44 metrics, 9 unstable metrics.

Startup time reports for petclinic

gantt
    title petclinic - global startup overhead: candidate=1.51.0-SNAPSHOT~6e43ba5cce, baseline=1.51.0-SNAPSHOT~d78bb4d2b2

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.001 s) : 0, 1001347
Total [baseline] (10.619 s) : 0, 10619497
Agent [candidate] (996.149 ms) : 0, 996149
Total [candidate] (10.666 s) : 0, 10666437
section appsec
Agent [baseline] (1.177 s) : 0, 1177087
Total [baseline] (10.734 s) : 0, 10734142
Agent [candidate] (1.187 s) : 0, 1187061
Total [candidate] (10.732 s) : 0, 10732354
section iast
Agent [baseline] (1.138 s) : 0, 1137545
Total [baseline] (10.823 s) : 0, 10822782
Agent [candidate] (1.135 s) : 0, 1134856
Total [candidate] (10.915 s) : 0, 10915363
section profiling
Agent [baseline] (1.251 s) : 0, 1250656
Total [baseline] (11.073 s) : 0, 11073137
Agent [candidate] (1.241 s) : 0, 1240942
Total [candidate] (10.974 s) : 0, 10974190

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.001 s	-
Agent	appsec	1.177 s	175.739 ms (17.6%)
Agent	iast	1.138 s	136.198 ms (13.6%)
Agent	profiling	1.251 s	249.308 ms (24.9%)
Total	tracing	10.619 s	-
Total	appsec	10.734 s	114.645 ms (1.1%)
Total	iast	10.823 s	203.285 ms (1.9%)
Total	profiling	11.073 s	453.639 ms (4.3%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	996.149 ms	-
Agent	appsec	1.187 s	190.912 ms (19.2%)
Agent	iast	1.135 s	138.706 ms (13.9%)
Agent	profiling	1.241 s	244.793 ms (24.6%)
Total	tracing	10.666 s	-
Total	appsec	10.732 s	65.917 ms (0.6%)
Total	iast	10.915 s	248.926 ms (2.3%)
Total	profiling	10.974 s	307.752 ms (2.9%)

gantt
    title petclinic - break down per module: candidate=1.51.0-SNAPSHOT~6e43ba5cce, baseline=1.51.0-SNAPSHOT~d78bb4d2b2

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (691.471 ms) : 0, 691471
BytebuddyAgent [candidate] (687.185 ms) : 0, 687185
GlobalTracer [baseline] (243.65 ms) : 0, 243650
GlobalTracer [candidate] (243.118 ms) : 0, 243118
AppSec [baseline] (30.267 ms) : 0, 30267
AppSec [candidate] (30.104 ms) : 0, 30104
Debugger [baseline] (6.103 ms) : 0, 6103
Debugger [candidate] (6.047 ms) : 0, 6047
Remote Config [baseline] (649.261 µs) : 0, 649
Remote Config [candidate] (650.588 µs) : 0, 651
Telemetry [baseline] (8.346 ms) : 0, 8346
Telemetry [candidate] (8.177 ms) : 0, 8177
section appsec
BytebuddyAgent [baseline] (714.653 ms) : 0, 714653
BytebuddyAgent [candidate] (720.262 ms) : 0, 720262
GlobalTracer [baseline] (236.512 ms) : 0, 236512
GlobalTracer [candidate] (238.669 ms) : 0, 238669
IAST [baseline] (21.953 ms) : 0, 21953
IAST [candidate] (22.354 ms) : 0, 22354
AppSec [baseline] (168.463 ms) : 0, 168463
AppSec [candidate] (169.874 ms) : 0, 169874
Debugger [baseline] (5.858 ms) : 0, 5858
Debugger [candidate] (5.885 ms) : 0, 5885
Remote Config [baseline] (602.12 µs) : 0, 602
Remote Config [candidate] (619.176 µs) : 0, 619
Telemetry [baseline] (8.131 ms) : 0, 8131
Telemetry [candidate] (8.301 ms) : 0, 8301
section iast
BytebuddyAgent [baseline] (813.389 ms) : 0, 813389
BytebuddyAgent [candidate] (811.999 ms) : 0, 811999
GlobalTracer [baseline] (233.376 ms) : 0, 233376
GlobalTracer [candidate] (232.765 ms) : 0, 232765
IAST [baseline] (25.495 ms) : 0, 25495
IAST [candidate] (29.923 ms) : 0, 29923
AppSec [baseline] (29.983 ms) : 0, 29983
AppSec [candidate] (25.035 ms) : 0, 25035
Debugger [baseline] (5.787 ms) : 0, 5787
Debugger [candidate] (5.817 ms) : 0, 5817
Remote Config [baseline] (572.176 µs) : 0, 572
Remote Config [candidate] (590.698 µs) : 0, 591
Telemetry [baseline] (7.956 ms) : 0, 7956
Telemetry [candidate] (7.875 ms) : 0, 7875
section profiling
BytebuddyAgent [baseline] (682.446 ms) : 0, 682446
BytebuddyAgent [candidate] (677.311 ms) : 0, 677311
GlobalTracer [baseline] (363.592 ms) : 0, 363592
GlobalTracer [candidate] (360.882 ms) : 0, 360882
AppSec [baseline] (34.118 ms) : 0, 34118
AppSec [candidate] (32.379 ms) : 0, 32379
Debugger [baseline] (8.303 ms) : 0, 8303
Debugger [candidate] (9.658 ms) : 0, 9658
Remote Config [baseline] (1.354 ms) : 0, 1354
Remote Config [candidate] (668.133 µs) : 0, 668
Telemetry [baseline] (8.739 ms) : 0, 8739
Telemetry [candidate] (9.387 ms) : 0, 9387
ProfilingAgent [baseline] (103.275 ms) : 0, 103275
ProfilingAgent [candidate] (102.075 ms) : 0, 102075
Profiling [baseline] (103.3 ms) : 0, 103300
Profiling [candidate] (102.1 ms) : 0, 102100

Startup time reports for insecure-bank

gantt
    title insecure-bank - global startup overhead: candidate=1.51.0-SNAPSHOT~6e43ba5cce, baseline=1.51.0-SNAPSHOT~d78bb4d2b2

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (990.842 ms) : 0, 990842
Total [baseline] (8.509 s) : 0, 8508905
Agent [candidate] (1.003 s) : 0, 1003156
Total [candidate] (8.573 s) : 0, 8573451
section iast
Agent [baseline] (1.136 s) : 0, 1135663
Total [baseline] (9.272 s) : 0, 9271841
Agent [candidate] (1.137 s) : 0, 1136627
Total [candidate] (9.212 s) : 0, 9211767

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	990.842 ms	-
Agent	iast	1.136 s	144.821 ms (14.6%)
Total	tracing	8.509 s	-
Total	iast	9.272 s	762.936 ms (9.0%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.003 s	-
Agent	iast	1.137 s	133.471 ms (13.3%)
Total	tracing	8.573 s	-
Total	iast	9.212 s	638.316 ms (7.4%)

gantt
    title insecure-bank - break down per module: candidate=1.51.0-SNAPSHOT~6e43ba5cce, baseline=1.51.0-SNAPSHOT~d78bb4d2b2

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (684.489 ms) : 0, 684489
BytebuddyAgent [candidate] (691.948 ms) : 0, 691948
GlobalTracer [baseline] (240.725 ms) : 0, 240725
GlobalTracer [candidate] (244.767 ms) : 0, 244767
AppSec [baseline] (29.95 ms) : 0, 29950
AppSec [candidate] (30.354 ms) : 0, 30354
Debugger [baseline] (6.02 ms) : 0, 6020
Debugger [candidate] (6.093 ms) : 0, 6093
Remote Config [baseline] (648.382 µs) : 0, 648
Remote Config [candidate] (655.833 µs) : 0, 656
Telemetry [baseline] (8.175 ms) : 0, 8175
Telemetry [candidate] (8.265 ms) : 0, 8265
section iast
BytebuddyAgent [baseline] (812.275 ms) : 0, 812275
BytebuddyAgent [candidate] (812.727 ms) : 0, 812727
GlobalTracer [baseline] (232.856 ms) : 0, 232856
GlobalTracer [candidate] (233.264 ms) : 0, 233264
IAST [baseline] (26.995 ms) : 0, 26995
IAST [candidate] (27.873 ms) : 0, 27873
AppSec [baseline] (28.371 ms) : 0, 28371
AppSec [candidate] (27.576 ms) : 0, 27576
Debugger [baseline] (5.819 ms) : 0, 5819
Debugger [candidate] (5.813 ms) : 0, 5813
Remote Config [baseline] (582.384 µs) : 0, 582
Remote Config [candidate] (578.66 µs) : 0, 579
Telemetry [baseline] (7.912 ms) : 0, 7912
Telemetry [candidate] (7.874 ms) : 0, 7874

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	sezen.leblay/APPSEC-57270-default-regex-change
git_commit_date	1750764487	1750765641
git_commit_sha	`d78bb4d`	`6e43ba5`
release_version	1.51.0-SNAPSHOT~d78bb4d2b2	1.51.0-SNAPSHOT~6e43ba5cce

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1750767072	1750767072
ci_job_id	995547170	995547170
ci_pipeline_id	68584674	68584674
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-pw1nxbd:project-304-concurrent-0-69zj9x9n 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-pw1nxbd:project-304-concurrent-0-69zj9x9n 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 2 performance regressions! Performance is the same for 10 metrics, 12 unstable metrics.

scenario	Δ mean http_req_duration	Δ mean throughput	candidate mean http_req_duration	candidate mean throughput	baseline mean http_req_duration	baseline mean throughput
scenario:load:insecure-bank:tracing:high_load	worse [+170.214µs; +415.482µs] or [+2.237%; +5.460%]	unstable [-103.490op/s; +59.053op/s] or [-17.009%; +9.706%]	7.903ms	586.219op/s	7.610ms	608.438op/s
scenario:load:petclinic:profiling:high_load	worse [+1.530ms; +2.566ms] or [+3.135%; +5.257%]	unstable [-10.429op/s; +2.704op/s] or [-10.878%; +2.820%]	50.865ms	92.013op/s	48.817ms	95.875op/s

Request duration reports for petclinic

gantt
    title petclinic - request duration [CI 0.99] : candidate=1.51.0-SNAPSHOT~6e43ba5cce, baseline=1.51.0-SNAPSHOT~d78bb4d2b2
    dateFormat X
    axisFormat %s
section baseline
no_agent (37.125 ms) : 36831, 37420
.   : milestone, 37125,
appsec (48.052 ms) : 47613, 48490
.   : milestone, 48052,
code_origins (45.724 ms) : 45344, 46105
.   : milestone, 45724,
iast (44.479 ms) : 44087, 44871
.   : milestone, 44479,
profiling (48.817 ms) : 48357, 49276
.   : milestone, 48817,
tracing (44.216 ms) : 43846, 44585
.   : milestone, 44216,
section candidate
no_agent (36.827 ms) : 36530, 37125
.   : milestone, 36827,
appsec (47.157 ms) : 46735, 47578
.   : milestone, 47157,
code_origins (44.873 ms) : 44491, 45256
.   : milestone, 44873,
iast (44.161 ms) : 43764, 44559
.   : milestone, 44161,
profiling (50.865 ms) : 50363, 51367
.   : milestone, 50865,
tracing (43.598 ms) : 43241, 43955
.   : milestone, 43598,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	37.125 ms [36.831 ms, 37.42 ms]	-
appsec	48.052 ms [47.613 ms, 48.49 ms]	10.926 ms (29.4%)
code_origins	45.724 ms [45.344 ms, 46.105 ms]	8.599 ms (23.2%)
iast	44.479 ms [44.087 ms, 44.871 ms]	7.354 ms (19.8%)
profiling	48.817 ms [48.357 ms, 49.276 ms]	11.692 ms (31.5%)
tracing	44.216 ms [43.846 ms, 44.585 ms]	7.091 ms (19.1%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	36.827 ms [36.53 ms, 37.125 ms]	-
appsec	47.157 ms [46.735 ms, 47.578 ms]	10.329 ms (28.0%)
code_origins	44.873 ms [44.491 ms, 45.256 ms]	8.046 ms (21.8%)
iast	44.161 ms [43.764 ms, 44.559 ms]	7.334 ms (19.9%)
profiling	50.865 ms [50.363 ms, 51.367 ms]	14.038 ms (38.1%)
tracing	43.598 ms [43.241 ms, 43.955 ms]	6.77 ms (18.4%)

Request duration reports for insecure-bank

gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.51.0-SNAPSHOT~6e43ba5cce, baseline=1.51.0-SNAPSHOT~d78bb4d2b2
    dateFormat X
    axisFormat %s
section baseline
no_agent (4.371 ms) : 4319, 4424
.   : milestone, 4371,
iast (9.25 ms) : 9101, 9399
.   : milestone, 9250,
iast_FULL (13.967 ms) : 13697, 14237
.   : milestone, 13967,
iast_GLOBAL (10.142 ms) : 9963, 10321
.   : milestone, 10142,
profiling (8.631 ms) : 8501, 8762
.   : milestone, 8631,
tracing (7.61 ms) : 7500, 7720
.   : milestone, 7610,
section candidate
no_agent (4.461 ms) : 4408, 4514
.   : milestone, 4461,
iast (9.229 ms) : 9070, 9387
.   : milestone, 9229,
iast_FULL (13.467 ms) : 13204, 13731
.   : milestone, 13467,
iast_GLOBAL (10.124 ms) : 9946, 10302
.   : milestone, 10124,
profiling (8.839 ms) : 8693, 8984
.   : milestone, 8839,
tracing (7.903 ms) : 7785, 8020
.   : milestone, 7903,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	4.371 ms [4.319 ms, 4.424 ms]	-
iast	9.25 ms [9.101 ms, 9.399 ms]	4.878 ms (111.6%)
iast_FULL	13.967 ms [13.697 ms, 14.237 ms]	9.596 ms (219.5%)
iast_GLOBAL	10.142 ms [9.963 ms, 10.321 ms]	5.77 ms (132.0%)
profiling	8.631 ms [8.501 ms, 8.762 ms]	4.26 ms (97.4%)
tracing	7.61 ms [7.5 ms, 7.72 ms]	3.238 ms (74.1%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	4.461 ms [4.408 ms, 4.514 ms]	-
iast	9.229 ms [9.07 ms, 9.387 ms]	4.768 ms (106.9%)
iast_FULL	13.467 ms [13.204 ms, 13.731 ms]	9.006 ms (201.9%)
iast_GLOBAL	10.124 ms [9.946 ms, 10.302 ms]	5.664 ms (127.0%)
profiling	8.839 ms [8.693 ms, 8.984 ms]	4.378 ms (98.1%)
tracing	7.903 ms [7.785 ms, 8.02 ms]	3.442 ms (77.2%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	sezen.leblay/APPSEC-57270-default-regex-change
git_commit_date	1750764487	1750765641
git_commit_sha	`d78bb4d`	`6e43ba5`
release_version	1.51.0-SNAPSHOT~d78bb4d2b2	1.51.0-SNAPSHOT~6e43ba5cce

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1750767540	1750767540
ci_job_id	995547172	995547172
ci_pipeline_id	68584674	68584674
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-psdwjdjn-project-304-concurrent-0-m4jz4cd0 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-psdwjdjn-project-304-concurrent-0-m4jz4cd0 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics.

Execution time for biojava

gantt
    title biojava - execution time [CI 0.99] : candidate=1.51.0-SNAPSHOT~6e43ba5cce, baseline=1.51.0-SNAPSHOT~d78bb4d2b2
    dateFormat X
    axisFormat %s
section baseline
no_agent (14.82 s) : 14820000, 14820000
.   : milestone, 14820000,
appsec (14.942 s) : 14942000, 14942000
.   : milestone, 14942000,
iast (18.494 s) : 18494000, 18494000
.   : milestone, 18494000,
iast_GLOBAL (17.823 s) : 17823000, 17823000
.   : milestone, 17823000,
profiling (15.258 s) : 15258000, 15258000
.   : milestone, 15258000,
tracing (14.885 s) : 14885000, 14885000
.   : milestone, 14885000,
section candidate
no_agent (14.906 s) : 14906000, 14906000
.   : milestone, 14906000,
appsec (14.826 s) : 14826000, 14826000
.   : milestone, 14826000,
iast (18.499 s) : 18499000, 18499000
.   : milestone, 18499000,
iast_GLOBAL (18.068 s) : 18068000, 18068000
.   : milestone, 18068000,
profiling (15.652 s) : 15652000, 15652000
.   : milestone, 15652000,
tracing (14.906 s) : 14906000, 14906000
.   : milestone, 14906000,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	14.82 s [14.82 s, 14.82 s]	-
appsec	14.942 s [14.942 s, 14.942 s]	122.0 ms (0.8%)
iast	18.494 s [18.494 s, 18.494 s]	3.674 s (24.8%)
iast_GLOBAL	17.823 s [17.823 s, 17.823 s]	3.003 s (20.3%)
profiling	15.258 s [15.258 s, 15.258 s]	438.0 ms (3.0%)
tracing	14.885 s [14.885 s, 14.885 s]	65.0 ms (0.4%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	14.906 s [14.906 s, 14.906 s]	-
appsec	14.826 s [14.826 s, 14.826 s]	-80.0 ms (-0.5%)
iast	18.499 s [18.499 s, 18.499 s]	3.593 s (24.1%)
iast_GLOBAL	18.068 s [18.068 s, 18.068 s]	3.162 s (21.2%)
profiling	15.652 s [15.652 s, 15.652 s]	746.0 ms (5.0%)
tracing	14.906 s [14.906 s, 14.906 s]	0.0 µs (0.0%)

Execution time for tomcat

gantt
    title tomcat - execution time [CI 0.99] : candidate=1.51.0-SNAPSHOT~6e43ba5cce, baseline=1.51.0-SNAPSHOT~d78bb4d2b2
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.473 ms) : 1461, 1484
.   : milestone, 1473,
appsec (2.387 ms) : 2338, 2436
.   : milestone, 2387,
iast (2.192 ms) : 2131, 2253
.   : milestone, 2192,
iast_GLOBAL (2.231 ms) : 2169, 2293
.   : milestone, 2231,
profiling (2.022 ms) : 1973, 2072
.   : milestone, 2022,
tracing (2.018 ms) : 1970, 2066
.   : milestone, 2018,
section candidate
no_agent (1.474 ms) : 1463, 1486
.   : milestone, 1474,
appsec (2.4 ms) : 2352, 2449
.   : milestone, 2400,
iast (2.187 ms) : 2125, 2248
.   : milestone, 2187,
iast_GLOBAL (2.221 ms) : 2159, 2283
.   : milestone, 2221,
profiling (2.055 ms) : 2004, 2106
.   : milestone, 2055,
tracing (2.012 ms) : 1964, 2059
.   : milestone, 2012,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.473 ms [1.461 ms, 1.484 ms]	-
appsec	2.387 ms [2.338 ms, 2.436 ms]	914.07 µs (62.1%)
iast	2.192 ms [2.131 ms, 2.253 ms]	719.312 µs (48.8%)
iast_GLOBAL	2.231 ms [2.169 ms, 2.293 ms]	757.936 µs (51.5%)
profiling	2.022 ms [1.973 ms, 2.072 ms]	549.767 µs (37.3%)
tracing	2.018 ms [1.97 ms, 2.066 ms]	545.382 µs (37.0%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.474 ms [1.463 ms, 1.486 ms]	-
appsec	2.4 ms [2.352 ms, 2.449 ms]	925.726 µs (62.8%)
iast	2.187 ms [2.125 ms, 2.248 ms]	712.294 µs (48.3%)
iast_GLOBAL	2.221 ms [2.159 ms, 2.283 ms]	746.243 µs (50.6%)
profiling	2.055 ms [2.004 ms, 2.106 ms]	580.57 µs (39.4%)
tracing	2.012 ms [1.964 ms, 2.059 ms]	537.183 µs (36.4%)

Signed-off-by: sezen.leblay <sezen.leblay@datadoghq.com>

github-actions · 2025-06-24T11:47:44Z

Hi! 👋 Thanks for your pull request! 🎉

To help us review it, please make sure to:

Add at least one type, and one component or instrumentation label to the pull request

If you need help, please check our contributing guidelines.

base corrected

| Package | Type | Package file | Manager | Update | Change | |---|---|---|---|---|---| | [com.google.errorprone:error_prone_annotations](https://errorprone.info) ([source](https://github.com/google/error-prone)) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.39.0` -> `2.40.0` | | [org.apache.commons:commons-lang3](https://commons.apache.org/proper/commons-lang/) ([source](https://gitbox.apache.org/repos/asf/commons-lang.git)) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `3.17.0` -> `3.18.0` | | [org.jetbrains.kotlinx.binary-compatibility-validator](https://github.com/Kotlin/binary-compatibility-validator) | plugin | misk/gradle/libs.versions.toml | gradle | patch | `0.18.0` -> `0.18.1` | | [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.50.1` -> `1.51.0` | | [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:sqs](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | --- ### Release Notes <details> <summary>google/error-prone (com.google.errorprone:error_prone_annotations)</summary> ### [`v2.40.0`](https://github.com/google/error-prone/releases/tag/v2.40.0): Error Prone 2.40.0 Changes: - Bug fixes and improvements - Releases (including snapshots) have migrated from [OSSRH to the Central Publisher Portal](https://central.sonatype.org/pages/ossrh-eol/#process-to-migrate) Full changelog: google/error-prone@v2.39.0...v2.40.0 </details> <details> <summary>Kotlin/binary-compatibility-validator (org.jetbrains.kotlinx.binary-compatibility-validator)</summary> ### [`v0.18.1`](https://github.com/Kotlin/binary-compatibility-validator/releases/tag/0.18.1) [Compare Source](Kotlin/binary-compatibility-validator@0.18.0...0.18.1) #### What's Changed - Fixed a bug preventing use of cross-compilation support during KLIB dump validation \[[#304](https://github.com/Kotlin/binary-compatibility-validator/issues/304)]\[[#306](https://github.com/Kotlin/binary-compatibility-validator/issues/306)] </details> <details> <summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary> ### [`v1.51.0`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.51.0): 1.51.0 ### Components #### Application Security Management (IAST) - 🐛 Fix verify error when ctor params are used after a call site ([#9083](DataDog/dd-trace-java#9083) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - 🐛 Limit the maximum size of the location path in IAST vulnerabilities ([#9028](DataDog/dd-trace-java#9028) - [@jandro996](https://github.com/jandro996)) - 🐛 Fix IAST gRPC handler with null superclass ([#8984](DataDog/dd-trace-java#8984) - [@smola](https://github.com/smola)) - ✨ Optimize IAST Vulnerability Detection ([#8885](DataDog/dd-trace-java#8885) - [@jandro996](https://github.com/jandro996)) #### Application Security Management (WAF) - ✨ Upgrade libddwaf-java to 15.0.0 ([#9022](DataDog/dd-trace-java#9022) - [@sezen-datadog](https://github.com/sezen-datadog)) - ✨ Extract RestEasy json body response schemas ([#9015](DataDog/dd-trace-java#9015) - [@jandro996](https://github.com/jandro996)) - ✨ Extract Jersey json body response schemas ([#9014](DataDog/dd-trace-java#9014) - [@jandro996](https://github.com/jandro996)) - ✨ Extract Ratpack json body response schemas ([#9013](DataDog/dd-trace-java#9013) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Enable API Security by default and make it lazy loading ([#9009](DataDog/dd-trace-java#9009) - [@smola](https://github.com/smola)) - ✨ Extract Vert.x json body response schemas ([#9001](DataDog/dd-trace-java#9001) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Extract Play json body response schemas ([#8995](DataDog/dd-trace-java#8995) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - 🐛 Fix Jackson nodes introspection for request/response schema extraction ([#8980](DataDog/dd-trace-java#8980) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Extract Spring json body response schemas ([#8938](DataDog/dd-trace-java#8938) - [@sezen-datadog](https://github.com/sezen-datadog)) - ✨ Default obfuscation regexp update ([#8937](DataDog/dd-trace-java#8937) - [@sezen-datadog](https://github.com/sezen-datadog)) #### Build & Tooling - ✨ Cancel GitLab running pipeline on new PR push ([#9023](DataDog/dd-trace-java#9023) - [@PerfectSlayer](https://github.com/PerfectSlayer)) - ✨ Migrate publishing to Maven Central Portal ([#8807](DataDog/dd-trace-java#8807) - [@sarahchen6](https://github.com/sarahchen6)) #### Continuous Integration Visibility - 🐛 Fix Test Optimization to work with JDK 24 ([#9114](DataDog/dd-trace-java#9114) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Add repo root as safe directory on git client creation ([#9033](DataDog/dd-trace-java#9033) - [@daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Add PR number tag and improve PR information building ([#8990](DataDog/dd-trace-java#8990) - [@daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Update impacted tests logic ([#8923](DataDog/dd-trace-java#8923) - [@daniel-mohedano](https://github.com/daniel-mohedano)) #### Data Streams Monitoring - 🧹 Clean up DSM context injection ([#8776](DataDog/dd-trace-java#8776) - [@PerfectSlayer](https://github.com/PerfectSlayer)) #### Database Monitoring - 🐛 Set trace\_injected in try block ([#9025](DataDog/dd-trace-java#9025) - [@natashadada](https://github.com/natashadada)) #### Dynamic Instrumentation - 🐛 Add source file tracking enable option ([#9115](DataDog/dd-trace-java#9115) - [@jpbempel](https://github.com/jpbempel)) - ✨ Add java.util.Date support ([#9111](DataDog/dd-trace-java#9111) - [@jpbempel](https://github.com/jpbempel)) - ✨ Update file probe format ([#9047](DataDog/dd-trace-java#9047) - [@jpbempel](https://github.com/jpbempel)) - ✨ add safe local var hoisting ([#9034](DataDog/dd-trace-java#9034) - [@jpbempel](https://github.com/jpbempel)) - 🧹 Add new config for debugger upload interval ([#8959](DataDog/dd-trace-java#8959) - [@jpbempel](https://github.com/jpbempel)) - ✨ Enable Code Origin with Dynamic instrumentation ([#8940](DataDog/dd-trace-java#8940) - [@jpbempel](https://github.com/jpbempel)) #### ML Observability (LLMObs) - 💡 LLM Observability SDK ([#8781](DataDog/dd-trace-java#8781) - [@gary-huang](https://github.com/gary-huang), [@nayeem-kamal](https://github.com/nayeem-kamal)) #### Metrics - 🐛 Ensure client stat reporter is started when the agent is not available at bootstrap ([#9082](DataDog/dd-trace-java#9082) - [@amarziali](https://github.com/amarziali)) - ✨ Create metric: appsec.waf.config\_errors ([#8394](DataDog/dd-trace-java#8394) - [@sezen-datadog](https://github.com/sezen-datadog)) #### Platform components - ✨ Introduce environment component ([#9071](DataDog/dd-trace-java#9071) - [@PerfectSlayer](https://github.com/PerfectSlayer)) #### Profiling - 🐛 Remove annoying warning for smap event parsing ([#9119](DataDog/dd-trace-java#9119) - [@jbachorik](https://github.com/jbachorik)) - 🐛 Fix ByteCountingInputStream when reading past EOF ([#8988](DataDog/dd-trace-java#8988) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### Realtime User Monitoring - ✨ Add RUM SDK injection for servlet based web servers ([#9110](DataDog/dd-trace-java#9110) - [@PerfectSlayer](https://github.com/PerfectSlayer) [@amarziali](https://github.com/amarziali)) #### Telemetry - ✨ Update the config origin metric to match what it's mapping ([#9045](DataDog/dd-trace-java#9045) - [@sezen-datadog](https://github.com/sezen-datadog)) #### Testing - ✨ Add testing for latest stable version (JDK 24) ([#8875](DataDog/dd-trace-java#8875) - [@sarahchen6](https://github.com/sarahchen6)) #### Trace context propagation - 🐛 Fix bug with dropping baggage when `TracePropagationBehaviorExtract=IGNORE` ([#9037](DataDog/dd-trace-java#9037) - [@mhlidd](https://github.com/mhlidd)) - 🐛 Fix ArrayIndexOutOfBoundsException in PercentEscaper ([#9032](DataDog/dd-trace-java#9032) - [@mhlidd](https://github.com/mhlidd)) #### Tracer core - 🐛 Fix `Error` handling for trace interceptors ([#9097](DataDog/dd-trace-java#9097) - [@AlexeyKuznetsov-DD](https://github.com/AlexeyKuznetsov-DD)) - 💡 Add wildcard feature for `DD_TRACE_HEADER_TAGS` and enabling for Http Response headers ([#9067](DataDog/dd-trace-java#9067) - [@mhlidd](https://github.com/mhlidd)) #### Tracer public API - 💡 Add LLM Observability SDK ([#8781](DataDog/dd-trace-java#8781) - [@gary-huang](https://github.com/gary-huang)) ### Instrumentations #### Akka instrumentation - 🐛 Fix NPE in akka-http and pekko-http integrations ([#9019](DataDog/dd-trace-java#9019) - [@mcculls](https://github.com/mcculls)) #### Eclipse Vert.x instrumentation - ✨ Extract Vert.x json body response schemas ([#9001](DataDog/dd-trace-java#9001) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Write http.route tag as soon as possible in vert.x ([#8952](DataDog/dd-trace-java#8952) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### JAX-WS instrumentation - 💡⚠️ Enable jax-ws integration by default ([#9030](DataDog/dd-trace-java#9030) - [@bm1549](https://github.com/bm1549)) - ✨ Extract Jersey json body response schemas ([#9014](DataDog/dd-trace-java#9014) - [@jandro996](https://github.com/jandro996)) #### Mule instrumentation - 🐛 Propagate grizzly http span in filters if nothing is active ([#9016](DataDog/dd-trace-java#9016) - [@amarziali](https://github.com/amarziali)) #### Play Framework instrumentation - ✨ Extract Play json body response schemas ([#8995](DataDog/dd-trace-java#8995) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### Ratpack instrumentation - ✨ Extract Ratpack json body response schemas ([#9013](DataDog/dd-trace-java#9013) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### Spring instrumentation - ✨ Extract Spring json body response schemas ([#8938](DataDog/dd-trace-java#8938) - [@sezen-datadog](https://github.com/sezen-datadog)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am every weekday" in timezone Australia/Melbourne, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). GitOrigin-RevId: 649b690d4c9d7dcb572c457f0802b42b8e3e682e

sezen-datadog force-pushed the sezen.leblay/APPSEC-57270-default-regex-change branch from f0f5955 to 5186564 Compare June 6, 2025 09:40

AlexeyKuznetsov-DD previously requested changes Jun 6, 2025

View reviewed changes

dd-java-agent/appsec/src/jmh/java/datadog/appsec/benchmark/WafBenchmark.java Outdated Show resolved Hide resolved

sezen-datadog changed the base branch from master to sezen.leblay/upgrade-libddwaf-java-1.23 June 10, 2025 09:18

sezen-datadog force-pushed the sezen.leblay/APPSEC-57270-default-regex-change branch from 5186564 to 24555b6 Compare June 10, 2025 10:03

sezen-datadog force-pushed the sezen.leblay/upgrade-libddwaf-java-1.23 branch from 6c47b1e to 42f13c9 Compare June 10, 2025 11:37

sezen-datadog force-pushed the sezen.leblay/APPSEC-57270-default-regex-change branch 2 times, most recently from 22f3cfd to 5646b68 Compare June 12, 2025 06:43

sezen-datadog force-pushed the sezen.leblay/upgrade-libddwaf-java-1.23 branch 2 times, most recently from 5b79c2f to 8212f64 Compare June 12, 2025 06:47

sezen-datadog force-pushed the sezen.leblay/upgrade-libddwaf-java-1.23 branch 2 times, most recently from bad8ea7 to 2893e4c Compare June 23, 2025 08:23

sezen-datadog marked this pull request as ready for review June 23, 2025 11:00

sezen-datadog requested a review from a team as a code owner June 23, 2025 11:00

sezen-datadog requested review from smola and manuel-alvarez-alvarez June 23, 2025 11:00

manuel-alvarez-alvarez approved these changes Jun 23, 2025

View reviewed changes

sezen-datadog force-pushed the sezen.leblay/upgrade-libddwaf-java-1.23 branch from 2893e4c to 60d5eee Compare June 23, 2025 11:56

sezen-datadog requested a review from a team as a code owner June 23, 2025 11:56

sezen-datadog requested review from AlexeyKuznetsov-DD and removed request for a team June 23, 2025 11:56

sezen-datadog force-pushed the sezen.leblay/upgrade-libddwaf-java-1.23 branch 3 times, most recently from d802d00 to d5435c9 Compare June 24, 2025 10:36

sezen-datadog force-pushed the sezen.leblay/APPSEC-57270-default-regex-change branch from d1dbd04 to 2856a4e Compare June 24, 2025 10:49

sezen-datadog requested review from a team as code owners June 24, 2025 10:49

sezen-datadog requested review from randomanderson and removed request for a team June 24, 2025 10:49

Base automatically changed from sezen.leblay/upgrade-libddwaf-java-1.23 to master June 24, 2025 11:28

Default obfuscation regexp update

6e43ba5

Signed-off-by: sezen.leblay <sezen.leblay@datadoghq.com>

sezen-datadog force-pushed the sezen.leblay/APPSEC-57270-default-regex-change branch from 5734454 to 6e43ba5 Compare June 24, 2025 11:47

sezen-datadog enabled auto-merge (squash) June 24, 2025 11:50

sezen-datadog added comp: asm waf Application Security Management (WAF) type: enhancement Enhancements and improvements labels Jun 24, 2025

sezen-datadog merged commit b7fd382 into master Jun 24, 2025
484 of 487 checks passed

sezen-datadog deleted the sezen.leblay/APPSEC-57270-default-regex-change branch June 24, 2025 12:37

github-actions bot added this to the 1.51.0 milestone Jun 24, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Default obfuscation regexp update #8937

Default obfuscation regexp update #8937

Uh oh!

sezen-datadog commented Jun 6, 2025 •

edited by jira bot

Loading

Uh oh!

Uh oh!

pr-commenter bot commented Jun 23, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Jun 24, 2025 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Default obfuscation regexp update #8937

Default obfuscation regexp update #8937

Uh oh!

Conversation

sezen-datadog commented Jun 6, 2025 • edited by jira bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What Does This Do

Motivation

Additional Notes

Contributor Checklist

Uh oh!

Uh oh!

pr-commenter bot commented Jun 23, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Benchmarks

Startup

Parameters

Summary

Load

Parameters

Summary

Dacapo

Parameters

Summary

Uh oh!

github-actions bot commented Jun 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

sezen-datadog commented Jun 6, 2025 •

edited by jira bot

Loading

pr-commenter bot commented Jun 23, 2025 •

edited

Loading

github-actions bot commented Jun 24, 2025 •

edited

Loading