Skip to content

Default obfuscation regexp update #8937

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Jun 24, 2025
Merged

Default obfuscation regexp update #8937

merged 1 commit into from
Jun 24, 2025

Conversation

sezen-datadog
Copy link
Contributor

@sezen-datadog sezen-datadog commented Jun 6, 2025 •
edited by jira bot
Loading

What Does This Do

Updates libddwaf-java version to have the new regex key for obfuscation

Motivation

Additional Notes

Contributor Checklist

Jira ticket: APPSEC-57270

@sezen-datadog sezen-datadog force-pushed the sezen.leblay/APPSEC-57270-default-regex-change branch from f0f5955 to 5186564 Compare June 6, 2025 09:40
AlexeyKuznetsov-DD
AlexeyKuznetsov-DD previously requested changes Jun 6, 2025
View reviewed changes
@sezen-datadog sezen-datadog changed the base branch from master to sezen.leblay/upgrade-libddwaf-java-1.23 June 10, 2025 09:18
@sezen-datadog sezen-datadog force-pushed the sezen.leblay/APPSEC-57270-default-regex-change branch from 5186564 to 24555b6 Compare June 10, 2025 10:03
@sezen-datadog sezen-datadog force-pushed the sezen.leblay/upgrade-libddwaf-java-1.23 branch from 6c47b1e to 42f13c9 Compare June 10, 2025 11:37
@sezen-datadog sezen-datadog force-pushed the sezen.leblay/APPSEC-57270-default-regex-change branch 2 times, most recently from 22f3cfd to 5646b68 Compare June 12, 2025 06:43
@sezen-datadog sezen-datadog force-pushed the sezen.leblay/upgrade-libddwaf-java-1.23 branch 2 times, most recently from 5b79c2f to 8212f64 Compare June 12, 2025 06:47
@sezen-datadog sezen-datadog force-pushed the sezen.leblay/upgrade-libddwaf-java-1.23 branch 2 times, most recently from bad8ea7 to 2893e4c Compare June 23, 2025 08:23
@sezen-datadog sezen-datadog marked this pull request as ready for review June 23, 2025 11:00
@sezen-datadog sezen-datadog requested a review from a team as a code owner June 23, 2025 11:00
@pr-commenter
Copy link

pr-commenter bot commented Jun 23, 2025 •
edited
Loading

Benchmarks

Startup

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master sezen.leblay/APPSEC-57270-default-regex-change
git_commit_date 1750764487 1750765641
git_commit_sha d78bb4d 6e43ba5
release_version 1.51.0-SNAPSHOT~d78bb4d2b2 1.51.0-SNAPSHOT~6e43ba5cce
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1750767382 1750767382
ci_job_id 995547169 995547169
ci_pipeline_id 68584674 68584674
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-bziamzy-project-304-concurrent-0-8v114dfi 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-bziamzy-project-304-concurrent-0-8v114dfi 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module Agent Agent
parent None None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 44 metrics, 9 unstable metrics.

Startup time reports for petclinic 
gantt
    title petclinic - global startup overhead: candidate=1.51.0-SNAPSHOT~6e43ba5cce, baseline=1.51.0-SNAPSHOT~d78bb4d2b2

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.001 s) : 0, 1001347
Total [baseline] (10.619 s) : 0, 10619497
Agent [candidate] (996.149 ms) : 0, 996149
Total [candidate] (10.666 s) : 0, 10666437
section appsec
Agent [baseline] (1.177 s) : 0, 1177087
Total [baseline] (10.734 s) : 0, 10734142
Agent [candidate] (1.187 s) : 0, 1187061
Total [candidate] (10.732 s) : 0, 10732354
section iast
Agent [baseline] (1.138 s) : 0, 1137545
Total [baseline] (10.823 s) : 0, 10822782
Agent [candidate] (1.135 s) : 0, 1134856
Total [candidate] (10.915 s) : 0, 10915363
section profiling
Agent [baseline] (1.251 s) : 0, 1250656
Total [baseline] (11.073 s) : 0, 11073137
Agent [candidate] (1.241 s) : 0, 1240942
Total [candidate] (10.974 s) : 0, 10974190
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.001 s -
Agent appsec 1.177 s 175.739 ms (17.6%)
Agent iast 1.138 s 136.198 ms (13.6%)
Agent profiling 1.251 s 249.308 ms (24.9%)
Total tracing 10.619 s -
Total appsec 10.734 s 114.645 ms (1.1%)
Total iast 10.823 s 203.285 ms (1.9%)
Total profiling 11.073 s 453.639 ms (4.3%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 996.149 ms -
Agent appsec 1.187 s 190.912 ms (19.2%)
Agent iast 1.135 s 138.706 ms (13.9%)
Agent profiling 1.241 s 244.793 ms (24.6%)
Total tracing 10.666 s -
Total appsec 10.732 s 65.917 ms (0.6%)
Total iast 10.915 s 248.926 ms (2.3%)
Total profiling 10.974 s 307.752 ms (2.9%) 
gantt
    title petclinic - break down per module: candidate=1.51.0-SNAPSHOT~6e43ba5cce, baseline=1.51.0-SNAPSHOT~d78bb4d2b2

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (691.471 ms) : 0, 691471
BytebuddyAgent [candidate] (687.185 ms) : 0, 687185
GlobalTracer [baseline] (243.65 ms) : 0, 243650
GlobalTracer [candidate] (243.118 ms) : 0, 243118
AppSec [baseline] (30.267 ms) : 0, 30267
AppSec [candidate] (30.104 ms) : 0, 30104
Debugger [baseline] (6.103 ms) : 0, 6103
Debugger [candidate] (6.047 ms) : 0, 6047
Remote Config [baseline] (649.261 µs) : 0, 649
Remote Config [candidate] (650.588 µs) : 0, 651
Telemetry [baseline] (8.346 ms) : 0, 8346
Telemetry [candidate] (8.177 ms) : 0, 8177
section appsec
BytebuddyAgent [baseline] (714.653 ms) : 0, 714653
BytebuddyAgent [candidate] (720.262 ms) : 0, 720262
GlobalTracer [baseline] (236.512 ms) : 0, 236512
GlobalTracer [candidate] (238.669 ms) : 0, 238669
IAST [baseline] (21.953 ms) : 0, 21953
IAST [candidate] (22.354 ms) : 0, 22354
AppSec [baseline] (168.463 ms) : 0, 168463
AppSec [candidate] (169.874 ms) : 0, 169874
Debugger [baseline] (5.858 ms) : 0, 5858
Debugger [candidate] (5.885 ms) : 0, 5885
Remote Config [baseline] (602.12 µs) : 0, 602
Remote Config [candidate] (619.176 µs) : 0, 619
Telemetry [baseline] (8.131 ms) : 0, 8131
Telemetry [candidate] (8.301 ms) : 0, 8301
section iast
BytebuddyAgent [baseline] (813.389 ms) : 0, 813389
BytebuddyAgent [candidate] (811.999 ms) : 0, 811999
GlobalTracer [baseline] (233.376 ms) : 0, 233376
GlobalTracer [candidate] (232.765 ms) : 0, 232765
IAST [baseline] (25.495 ms) : 0, 25495
IAST [candidate] (29.923 ms) : 0, 29923
AppSec [baseline] (29.983 ms) : 0, 29983
AppSec [candidate] (25.035 ms) : 0, 25035
Debugger [baseline] (5.787 ms) : 0, 5787
Debugger [candidate] (5.817 ms) : 0, 5817
Remote Config [baseline] (572.176 µs) : 0, 572
Remote Config [candidate] (590.698 µs) : 0, 591
Telemetry [baseline] (7.956 ms) : 0, 7956
Telemetry [candidate] (7.875 ms) : 0, 7875
section profiling
BytebuddyAgent [baseline] (682.446 ms) : 0, 682446
BytebuddyAgent [candidate] (677.311 ms) : 0, 677311
GlobalTracer [baseline] (363.592 ms) : 0, 363592
GlobalTracer [candidate] (360.882 ms) : 0, 360882
AppSec [baseline] (34.118 ms) : 0, 34118
AppSec [candidate] (32.379 ms) : 0, 32379
Debugger [baseline] (8.303 ms) : 0, 8303
Debugger [candidate] (9.658 ms) : 0, 9658
Remote Config [baseline] (1.354 ms) : 0, 1354
Remote Config [candidate] (668.133 µs) : 0, 668
Telemetry [baseline] (8.739 ms) : 0, 8739
Telemetry [candidate] (9.387 ms) : 0, 9387
ProfilingAgent [baseline] (103.275 ms) : 0, 103275
ProfilingAgent [candidate] (102.075 ms) : 0, 102075
Profiling [baseline] (103.3 ms) : 0, 103300
Profiling [candidate] (102.1 ms) : 0, 102100
Loading
Startup time reports for insecure-bank 
gantt
    title insecure-bank - global startup overhead: candidate=1.51.0-SNAPSHOT~6e43ba5cce, baseline=1.51.0-SNAPSHOT~d78bb4d2b2

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (990.842 ms) : 0, 990842
Total [baseline] (8.509 s) : 0, 8508905
Agent [candidate] (1.003 s) : 0, 1003156
Total [candidate] (8.573 s) : 0, 8573451
section iast
Agent [baseline] (1.136 s) : 0, 1135663
Total [baseline] (9.272 s) : 0, 9271841
Agent [candidate] (1.137 s) : 0, 1136627
Total [candidate] (9.212 s) : 0, 9211767
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 990.842 ms -
Agent iast 1.136 s 144.821 ms (14.6%)
Total tracing 8.509 s -
Total iast 9.272 s 762.936 ms (9.0%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.003 s -
Agent iast 1.137 s 133.471 ms (13.3%)
Total tracing 8.573 s -
Total iast 9.212 s 638.316 ms (7.4%) 
gantt
    title insecure-bank - break down per module: candidate=1.51.0-SNAPSHOT~6e43ba5cce, baseline=1.51.0-SNAPSHOT~d78bb4d2b2

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (684.489 ms) : 0, 684489
BytebuddyAgent [candidate] (691.948 ms) : 0, 691948
GlobalTracer [baseline] (240.725 ms) : 0, 240725
GlobalTracer [candidate] (244.767 ms) : 0, 244767
AppSec [baseline] (29.95 ms) : 0, 29950
AppSec [candidate] (30.354 ms) : 0, 30354
Debugger [baseline] (6.02 ms) : 0, 6020
Debugger [candidate] (6.093 ms) : 0, 6093
Remote Config [baseline] (648.382 µs) : 0, 648
Remote Config [candidate] (655.833 µs) : 0, 656
Telemetry [baseline] (8.175 ms) : 0, 8175
Telemetry [candidate] (8.265 ms) : 0, 8265
section iast
BytebuddyAgent [baseline] (812.275 ms) : 0, 812275
BytebuddyAgent [candidate] (812.727 ms) : 0, 812727
GlobalTracer [baseline] (232.856 ms) : 0, 232856
GlobalTracer [candidate] (233.264 ms) : 0, 233264
IAST [baseline] (26.995 ms) : 0, 26995
IAST [candidate] (27.873 ms) : 0, 27873
AppSec [baseline] (28.371 ms) : 0, 28371
AppSec [candidate] (27.576 ms) : 0, 27576
Debugger [baseline] (5.819 ms) : 0, 5819
Debugger [candidate] (5.813 ms) : 0, 5813
Remote Config [baseline] (582.384 µs) : 0, 582
Remote Config [candidate] (578.66 µs) : 0, 579
Telemetry [baseline] (7.912 ms) : 0, 7912
Telemetry [candidate] (7.874 ms) : 0, 7874
Loading

Load

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master sezen.leblay/APPSEC-57270-default-regex-change
git_commit_date 1750764487 1750765641
git_commit_sha d78bb4d 6e43ba5
release_version 1.51.0-SNAPSHOT~d78bb4d2b2 1.51.0-SNAPSHOT~6e43ba5cce
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1750767072 1750767072
ci_job_id 995547170 995547170
ci_pipeline_id 68584674 68584674
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-pw1nxbd:project-304-concurrent-0-69zj9x9n 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-pw1nxbd:project-304-concurrent-0-69zj9x9n 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 2 performance regressions! Performance is the same for 10 metrics, 12 unstable metrics.

scenario Δ mean http_req_duration Δ mean throughput candidate mean http_req_duration candidate mean throughput baseline mean http_req_duration baseline mean throughput
scenario:load:insecure-bank:tracing:high_load worse
[+170.214µs; +415.482µs] or [+2.237%; +5.460%]		 unstable
[-103.490op/s; +59.053op/s] or [-17.009%; +9.706%]		 7.903ms 586.219op/s 7.610ms 608.438op/s
scenario:load:petclinic:profiling:high_load worse
[+1.530ms; +2.566ms] or [+3.135%; +5.257%]		 unstable
[-10.429op/s; +2.704op/s] or [-10.878%; +2.820%]		 50.865ms 92.013op/s 48.817ms 95.875op/s
Request duration reports for petclinic 
gantt
    title petclinic - request duration [CI 0.99] : candidate=1.51.0-SNAPSHOT~6e43ba5cce, baseline=1.51.0-SNAPSHOT~d78bb4d2b2
    dateFormat X
    axisFormat %s
section baseline
no_agent (37.125 ms) : 36831, 37420
.   : milestone, 37125,
appsec (48.052 ms) : 47613, 48490
.   : milestone, 48052,
code_origins (45.724 ms) : 45344, 46105
.   : milestone, 45724,
iast (44.479 ms) : 44087, 44871
.   : milestone, 44479,
profiling (48.817 ms) : 48357, 49276
.   : milestone, 48817,
tracing (44.216 ms) : 43846, 44585
.   : milestone, 44216,
section candidate
no_agent (36.827 ms) : 36530, 37125
.   : milestone, 36827,
appsec (47.157 ms) : 46735, 47578
.   : milestone, 47157,
code_origins (44.873 ms) : 44491, 45256
.   : milestone, 44873,
iast (44.161 ms) : 43764, 44559
.   : milestone, 44161,
profiling (50.865 ms) : 50363, 51367
.   : milestone, 50865,
tracing (43.598 ms) : 43241, 43955
.   : milestone, 43598,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 37.125 ms [36.831 ms, 37.42 ms] -
appsec 48.052 ms [47.613 ms, 48.49 ms] 10.926 ms (29.4%)
code_origins 45.724 ms [45.344 ms, 46.105 ms] 8.599 ms (23.2%)
iast 44.479 ms [44.087 ms, 44.871 ms] 7.354 ms (19.8%)
profiling 48.817 ms [48.357 ms, 49.276 ms] 11.692 ms (31.5%)
tracing 44.216 ms [43.846 ms, 44.585 ms] 7.091 ms (19.1%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 36.827 ms [36.53 ms, 37.125 ms] -
appsec 47.157 ms [46.735 ms, 47.578 ms] 10.329 ms (28.0%)
code_origins 44.873 ms [44.491 ms, 45.256 ms] 8.046 ms (21.8%)
iast 44.161 ms [43.764 ms, 44.559 ms] 7.334 ms (19.9%)
profiling 50.865 ms [50.363 ms, 51.367 ms] 14.038 ms (38.1%)
tracing 43.598 ms [43.241 ms, 43.955 ms] 6.77 ms (18.4%)
Request duration reports for insecure-bank 
gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.51.0-SNAPSHOT~6e43ba5cce, baseline=1.51.0-SNAPSHOT~d78bb4d2b2
    dateFormat X
    axisFormat %s
section baseline
no_agent (4.371 ms) : 4319, 4424
.   : milestone, 4371,
iast (9.25 ms) : 9101, 9399
.   : milestone, 9250,
iast_FULL (13.967 ms) : 13697, 14237
.   : milestone, 13967,
iast_GLOBAL (10.142 ms) : 9963, 10321
.   : milestone, 10142,
profiling (8.631 ms) : 8501, 8762
.   : milestone, 8631,
tracing (7.61 ms) : 7500, 7720
.   : milestone, 7610,
section candidate
no_agent (4.461 ms) : 4408, 4514
.   : milestone, 4461,
iast (9.229 ms) : 9070, 9387
.   : milestone, 9229,
iast_FULL (13.467 ms) : 13204, 13731
.   : milestone, 13467,
iast_GLOBAL (10.124 ms) : 9946, 10302
.   : milestone, 10124,
profiling (8.839 ms) : 8693, 8984
.   : milestone, 8839,
tracing (7.903 ms) : 7785, 8020
.   : milestone, 7903,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 4.371 ms [4.319 ms, 4.424 ms] -
iast 9.25 ms [9.101 ms, 9.399 ms] 4.878 ms (111.6%)
iast_FULL 13.967 ms [13.697 ms, 14.237 ms] 9.596 ms (219.5%)
iast_GLOBAL 10.142 ms [9.963 ms, 10.321 ms] 5.77 ms (132.0%)
profiling 8.631 ms [8.501 ms, 8.762 ms] 4.26 ms (97.4%)
tracing 7.61 ms [7.5 ms, 7.72 ms] 3.238 ms (74.1%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 4.461 ms [4.408 ms, 4.514 ms] -
iast 9.229 ms [9.07 ms, 9.387 ms] 4.768 ms (106.9%)
iast_FULL 13.467 ms [13.204 ms, 13.731 ms] 9.006 ms (201.9%)
iast_GLOBAL 10.124 ms [9.946 ms, 10.302 ms] 5.664 ms (127.0%)
profiling 8.839 ms [8.693 ms, 8.984 ms] 4.378 ms (98.1%)
tracing 7.903 ms [7.785 ms, 8.02 ms] 3.442 ms (77.2%)

Dacapo

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master sezen.leblay/APPSEC-57270-default-regex-change
git_commit_date 1750764487 1750765641
git_commit_sha d78bb4d 6e43ba5
release_version 1.51.0-SNAPSHOT~d78bb4d2b2 1.51.0-SNAPSHOT~6e43ba5cce
See matching parameters
Baseline Candidate
application biojava biojava
ci_job_date 1750767540 1750767540
ci_job_id 995547172 995547172
ci_pipeline_id 68584674 68584674
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-psdwjdjn-project-304-concurrent-0-m4jz4cd0 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-psdwjdjn-project-304-concurrent-0-m4jz4cd0 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics.

Execution time for biojava 
gantt
    title biojava - execution time [CI 0.99] : candidate=1.51.0-SNAPSHOT~6e43ba5cce, baseline=1.51.0-SNAPSHOT~d78bb4d2b2
    dateFormat X
    axisFormat %s
section baseline
no_agent (14.82 s) : 14820000, 14820000
.   : milestone, 14820000,
appsec (14.942 s) : 14942000, 14942000
.   : milestone, 14942000,
iast (18.494 s) : 18494000, 18494000
.   : milestone, 18494000,
iast_GLOBAL (17.823 s) : 17823000, 17823000
.   : milestone, 17823000,
profiling (15.258 s) : 15258000, 15258000
.   : milestone, 15258000,
tracing (14.885 s) : 14885000, 14885000
.   : milestone, 14885000,
section candidate
no_agent (14.906 s) : 14906000, 14906000
.   : milestone, 14906000,
appsec (14.826 s) : 14826000, 14826000
.   : milestone, 14826000,
iast (18.499 s) : 18499000, 18499000
.   : milestone, 18499000,
iast_GLOBAL (18.068 s) : 18068000, 18068000
.   : milestone, 18068000,
profiling (15.652 s) : 15652000, 15652000
.   : milestone, 15652000,
tracing (14.906 s) : 14906000, 14906000
.   : milestone, 14906000,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 14.82 s [14.82 s, 14.82 s] -
appsec 14.942 s [14.942 s, 14.942 s] 122.0 ms (0.8%)
iast 18.494 s [18.494 s, 18.494 s] 3.674 s (24.8%)
iast_GLOBAL 17.823 s [17.823 s, 17.823 s] 3.003 s (20.3%)
profiling 15.258 s [15.258 s, 15.258 s] 438.0 ms (3.0%)
tracing 14.885 s [14.885 s, 14.885 s] 65.0 ms (0.4%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 14.906 s [14.906 s, 14.906 s] -
appsec 14.826 s [14.826 s, 14.826 s] -80.0 ms (-0.5%)
iast 18.499 s [18.499 s, 18.499 s] 3.593 s (24.1%)
iast_GLOBAL 18.068 s [18.068 s, 18.068 s] 3.162 s (21.2%)
profiling 15.652 s [15.652 s, 15.652 s] 746.0 ms (5.0%)
tracing 14.906 s [14.906 s, 14.906 s] 0.0 µs (0.0%)
Execution time for tomcat 
gantt
    title tomcat - execution time [CI 0.99] : candidate=1.51.0-SNAPSHOT~6e43ba5cce, baseline=1.51.0-SNAPSHOT~d78bb4d2b2
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.473 ms) : 1461, 1484
.   : milestone, 1473,
appsec (2.387 ms) : 2338, 2436
.   : milestone, 2387,
iast (2.192 ms) : 2131, 2253
.   : milestone, 2192,
iast_GLOBAL (2.231 ms) : 2169, 2293
.   : milestone, 2231,
profiling (2.022 ms) : 1973, 2072
.   : milestone, 2022,
tracing (2.018 ms) : 1970, 2066
.   : milestone, 2018,
section candidate
no_agent (1.474 ms) : 1463, 1486
.   : milestone, 1474,
appsec (2.4 ms) : 2352, 2449
.   : milestone, 2400,
iast (2.187 ms) : 2125, 2248
.   : milestone, 2187,
iast_GLOBAL (2.221 ms) : 2159, 2283
.   : milestone, 2221,
profiling (2.055 ms) : 2004, 2106
.   : milestone, 2055,
tracing (2.012 ms) : 1964, 2059
.   : milestone, 2012,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.473 ms [1.461 ms, 1.484 ms] -
appsec 2.387 ms [2.338 ms, 2.436 ms] 914.07 µs (62.1%)
iast 2.192 ms [2.131 ms, 2.253 ms] 719.312 µs (48.8%)
iast_GLOBAL 2.231 ms [2.169 ms, 2.293 ms] 757.936 µs (51.5%)
profiling 2.022 ms [1.973 ms, 2.072 ms] 549.767 µs (37.3%)
tracing 2.018 ms [1.97 ms, 2.066 ms] 545.382 µs (37.0%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.474 ms [1.463 ms, 1.486 ms] -
appsec 2.4 ms [2.352 ms, 2.449 ms] 925.726 µs (62.8%)
iast 2.187 ms [2.125 ms, 2.248 ms] 712.294 µs (48.3%)
iast_GLOBAL 2.221 ms [2.159 ms, 2.283 ms] 746.243 µs (50.6%)
profiling 2.055 ms [2.004 ms, 2.106 ms] 580.57 µs (39.4%)
tracing 2.012 ms [1.964 ms, 2.059 ms] 537.183 µs (36.4%)

@sezen-datadog sezen-datadog force-pushed the sezen.leblay/upgrade-libddwaf-java-1.23 branch from 2893e4c to 60d5eee Compare June 23, 2025 11:56
@sezen-datadog sezen-datadog requested a review from a team as a code owner June 23, 2025 11:56
@sezen-datadog sezen-datadog requested review from AlexeyKuznetsov-DD and removed request for a team June 23, 2025 11:56
@sezen-datadog sezen-datadog force-pushed the sezen.leblay/upgrade-libddwaf-java-1.23 branch 3 times, most recently from d802d00 to d5435c9 Compare June 24, 2025 10:36
@sezen-datadog sezen-datadog force-pushed the sezen.leblay/APPSEC-57270-default-regex-change branch from d1dbd04 to 2856a4e Compare June 24, 2025 10:49
@sezen-datadog sezen-datadog requested review from a team as code owners June 24, 2025 10:49
@sezen-datadog sezen-datadog requested review from randomanderson and removed request for a team June 24, 2025 10:49
Base automatically changed from sezen.leblay/upgrade-libddwaf-java-1.23 to master June 24, 2025 11:28
@sezen-datadog
Default obfuscation regexp update
6e43ba5 
Signed-off-by: sezen.leblay <sezen.leblay@datadoghq.com>
@sezen-datadog sezen-datadog force-pushed the sezen.leblay/APPSEC-57270-default-regex-change branch from 5734454 to 6e43ba5 Compare June 24, 2025 11:47
@github-actions GitHub Actions
Copy link
Contributor

github-actions bot commented Jun 24, 2025 •
edited
Loading

Hi! 👋 Thanks for your pull request! 🎉

To help us review it, please make sure to:

  • Add at least one type, and one component or instrumentation label to the pull request

If you need help, please check our contributing guidelines.

@sezen-datadog sezen-datadog enabled auto-merge (squash) June 24, 2025 11:50
@sezen-datadog sezen-datadog added comp: asm waf Application Security Management (WAF) type: enhancement labels Jun 24, 2025
@sezen-datadog sezen-datadog merged commit b7fd382 into master Jun 24, 2025
484 of 487 checks passed
@sezen-datadog sezen-datadog deleted the sezen.leblay/APPSEC-57270-default-regex-change branch June 24, 2025 12:37
@github-actions github-actions bot added this to the 1.51.0 milestone Jun 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@manuel-alvarez-alvarez manuel-alvarez-alvarez manuel-alvarez-alvarez approved these changes

@smola smola Awaiting requested review from smola smola is a code owner automatically assigned from DataDog/asm-java

@AlexeyKuznetsov-DD AlexeyKuznetsov-DD Awaiting requested review from AlexeyKuznetsov-DD AlexeyKuznetsov-DD was automatically assigned from DataDog/apm-lang-platform-java

@randomanderson randomanderson Awaiting requested review from randomanderson randomanderson was automatically assigned from DataDog/apm-release-platform

Assignees
No one assigned
Labels
comp: asm waf Application Security Management (WAF) type: enhancement
Projects
None yet
Milestone
1.51.0
Development

Successfully merging this pull request may close these issues.
4 participants
@sezen-datadog @smola @manuel-alvarez-alvarez @AlexeyKuznetsov-DD