feature: add validator handler.

Author: ‘niuerzhuang’

dongtai-common/src/main/java/io/dongtai/iast/common/config/ConfigBuilder.java

@@ -24,6 +24,8 @@ private ConfigBuilder() {
                 Config.<Boolean>create(ConfigKey.ENABLE_LOGGER));
         this.configMap.put(ConfigKey.LOGGER_LEVEL,
                 Config.<String>create(ConfigKey.LOGGER_LEVEL));
+        this.configMap.put(ConfigKey.VALIDATED_SINK,
+                Config.<Boolean>create(ConfigKey.VALIDATED_SINK).setDefaultValue(false));
     }
 
     public static ConfigBuilder getInstance() {
@@ -62,6 +64,7 @@ public void update(JSONObject config) {
         updateString(config, ConfigKey.JsonKey.JSON_VERSION_HEADER_KEY);
         updateBool(config, ConfigKey.JsonKey.JSON_ENABLE_LOGGER);
         updateString(config, ConfigKey.JsonKey.JSON_LOGGER_LEVEL);
+        updateBool(config, ConfigKey.JsonKey.JSON_VALIDATED_SINK);
         updateRequestDenyList(config);
     }
 

dongtai-common/src/main/java/io/dongtai/iast/common/config/ConfigKey.java

@@ -8,6 +8,7 @@ public enum ConfigKey {
     VERSION_HEADER_KEY,
     ENABLE_LOGGER,
     LOGGER_LEVEL,
+    VALIDATED_SINK,
     ;
 
     public enum JsonKey {
@@ -18,6 +19,7 @@ public enum JsonKey {
         JSON_VERSION_HEADER_KEY("version_header_name", VERSION_HEADER_KEY),
         JSON_ENABLE_LOGGER("enable_log", ENABLE_LOGGER),
         JSON_LOGGER_LEVEL("log_level", LOGGER_LEVEL),
+        JSON_VALIDATED_SINK("report_validated_sink", LOGGER_LEVEL),
         ;
 
         private final String key;

dongtai-core/src/main/java/io/dongtai/iast/core/handler/hookpoint/controller/impl/ValidatorImpl.java

@@ -42,6 +42,7 @@ public static void solveValidator(MethodEvent event, ValidatorNode validatorNode
                         && TaintPoolUtils.poolContains(event.objectInstance, event)) {
                     hash = getStringHash(event.objectInstance);
                     len = TaintRangesBuilder.getLength(event.objectInstance);
+                    event.setObjectValue(event.objectInstance, true);
                 }
             } else if (position.isParameter()) {
                 int parameterIndex = position.getParameterIndex();
@@ -54,6 +55,7 @@ public static void solveValidator(MethodEvent event, ValidatorNode validatorNode
                         && TaintPoolUtils.poolContains(parameter, event)) {
                     hash = getStringHash(parameter);
                     len = TaintRangesBuilder.getLength(parameter);
+                    event.addParameterValue(parameterIndex, parameter, true);
                 }
             } else return;
 

dongtai-core/src/main/java/io/dongtai/iast/core/handler/hookpoint/vulscan/dynamic/DynamicPropagatorScanner.java

@@ -181,7 +181,7 @@ private boolean sinkSourceHitTaintPool(MethodEvent event, SinkNode sinkNode) {
 
                     boolean commonCondition = tr.hasRequiredTaintTags(required) && !tr.hasDisallowedTaintTags(disallowed);
 
-                    if (PropertyUtils.isDisabledValidated()) {
+                    if (PropertyUtils.validatedSink()) {
                         tagsHit = commonCondition && !tr.hasValidatedTags(disallowed);
                     } else {
                         tagsHit = commonCondition;

dongtai-core/src/main/java/io/dongtai/iast/core/utils/PropertyUtils.java

@@ -1,5 +1,7 @@
 package io.dongtai.iast.core.utils;
 
+import io.dongtai.iast.common.config.ConfigBuilder;
+import io.dongtai.iast.common.config.ConfigKey;
 import io.dongtai.iast.common.constants.PropertyConstant;
 import io.dongtai.log.DongTaiLog;
 import io.dongtai.log.ErrorCode;
@@ -224,10 +226,9 @@ public static Boolean isDisabledCustomModel() {
         return isDisabledCustomModel;
     }
 
-    public static Boolean isDisabledValidated() {
+    public static Boolean validatedSink() {
         if (null == isDisabledCustomModel){
-            List<String> disabledFeatures = getDisabledFeatures();
-            isDisabledCustomModel = disabledFeatures.contains("validated");
+            isDisabledCustomModel = ConfigBuilder.getInstance().get(ConfigKey.VALIDATED_SINK);
         }
         return isDisabledCustomModel;
     }