Merge pull request #574 from HXSecurity/develop

Release v1.13.1

Author: Nizernizer

dongtai-common/src/main/java/io/dongtai/iast/common/constants/AgentConstant.java

@@ -1,7 +1,7 @@
 package io.dongtai.iast.common.constants;
 
 public class AgentConstant {
-    public static final String VERSION_VALUE = "v1.13.0";
+    public static final String VERSION_VALUE = "v1.13.1";
     public static final String LANGUAGE = "JAVA";
     public static final String THREAD_NAME_PREFIX = "DongTai-IAST-";
     public static final String THREAD_NAME_PREFIX_CORE = "DongTai-IAST-Core-";

dongtai-core/src/main/java/io/dongtai/iast/core/handler/hookpoint/controller/impl/DubboImpl.java

@@ -101,8 +101,8 @@ public static void collectDubboRequestSource(Object handler, Object invocation,
             return;
         }
 
-        String url = (String) requestMeta.get("requestURL") + "/" + methodName;
-        String uri = (String) requestMeta.get("requestURI") + "/" + methodName;
+        String url =requestMeta.get("requestURL").toString() + "/" + methodName;
+        String uri =requestMeta.get("requestURI").toString() + "/" + methodName;
 
         StringBuilder argSign = new StringBuilder("(");
         if (argumentTypes != null && argumentTypes.length > 0) {
@@ -200,7 +200,7 @@ public static void collectDubboResponse(Object result, byte status) {
 
         try {
             EngineManager.REQUEST_CONTEXT.get().put("responseStatus",
-                    (String) EngineManager.REQUEST_CONTEXT.get().get("protocol") + " " + status);
+                    EngineManager.REQUEST_CONTEXT.get().get("protocol").toString() + " " + status);
             ByteArrayOutputStream buff = EngineManager.BODY_BUFFER.getResponse();
             buff.write(result.toString().getBytes());
         } catch (Throwable ignore) {

dongtai-core/src/main/java/io/dongtai/iast/core/utils/TaintPoolUtils.java

@@ -153,7 +153,7 @@ public static void trackObject(MethodEvent event, PolicyNode policyNode, Object
                 hash = System.identityHashCode(obj);
                 identityHash = hash;
             }
-            if (EngineManager.TAINT_HASH_CODES.contains(hash)) {
+            if (EngineManager.TAINT_HASH_CODES.contains(hash) && !isMicroservice) {
                 return;
             }
         }

pom.xml

@@ -4,7 +4,7 @@
     <modelVersion>4.0.0</modelVersion>
 
     <properties>
-        <revision>1.13.0</revision>
+        <revision>1.13.1</revision>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <shade-prefix>io.dongtai.iast.thirdparty</shade-prefix>