Skip to content

[Java]Enable filenames blocking test for spring-boot-jetty#6710

Draft
jandro996 wants to merge 2 commits intomainfrom
alejandro.gonzalez/APPSEC-61873-jetty
Draft

[Java]Enable filenames blocking test for spring-boot-jetty#6710
jandro996 wants to merge 2 commits intomainfrom
alejandro.gonzalez/APPSEC-61873-jetty

Conversation

@jandro996
Copy link
Copy Markdown
Member

Summary

Related

Jetty multipart file upload instrumentation fixed in
DataDog/dd-trace-java#10988 (Jetty 8.1.3, 9.3–11).
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 9, 2026

CODEOWNERS have been resolved as:

manifests/java.yml                                                      @DataDog/asm-java @DataDog/apm-java

@jandro996 jandro996 changed the title Enable filenames blocking test for spring-boot-jetty [Java]Enable filenames blocking test for spring-boot-jetty Apr 9, 2026
@datadog-official
Copy link
Copy Markdown

datadog-official bot commented Apr 9, 2026

⚠️ Tests

Fix all issues with BitsAI or with Cursor

⚠️ Other Violations

🧪 2 Tests failed

tests.appsec.test_blocking_addresses.Test_Blocking_request_body_filenames.test_blocking[spring-boot-jetty] from system_tests_suite   View in Datadog   (Fix with Cursor)
ValueError: No appsec event validate this condition

self = <tests.appsec.test_blocking_addresses.Test_Blocking_request_body_filenames object at 0x7f77edc70320>

    def test_blocking(self):
        """Can block on server.request.body.filenames"""
>       interfaces.library.assert_waf_attack(self.rbf_req, rule="tst-037-014")

tests/appsec/test_blocking_addresses.py:606: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
...
tests.appsec.test_blocking_addresses.Test_Blocking_request_body_filenames.test_non_blocking[spring-boot-jetty] from system_tests_suite   View in Datadog   (Fix with Cursor)
ValueError: No appsec event validate this condition

self = <tests.appsec.test_blocking_addresses.Test_Blocking_request_body_filenames object at 0x7f77edc703e0>

    def test_non_blocking(self):
        """Does not block on server.request.body.filenames when filename is safe"""
>       self.test_blocking()

tests/appsec/test_blocking_addresses.py:615: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
...

ℹ️ Info

No other issues found (see more)

❄️ No new flaky tests detected

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 3d79f9d | Docs | Datadog PR Page | Was this helpful? React with 👍/👎 or give us feedback!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant