Implement LFI

[estringana]

Description

This PR implements the first exploit prevention added to PHP. That means that apart of wrapping the LFI php functions, it also implements everything else to report exploits. This PR consists on:

• Wrapped certain file operations
  • file_get_contents
  • file_put_contents
  • fopen
  • readfile
• Add exploit preventions metrics
• Add LFI capability to RC
• Add rasp configurations

Related Jiras: APPSEC-52929, APPSEC-53812, APPSEC-53813

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 39.70588% with 41 lines in your changes missing coverage. Please review.

Project coverage is 78.07%. Comparing base (46173ca) to head (fdbbb12).

Files with missing lines	Patch %	Lines
.../Integrations/Filesystem/FilesystemIntegration.php	0.00%	37 Missing ⚠️
appsec/src/extension/ddappsec.c	87.50%	0 Missing and 2 partials ⚠️
appsec/src/extension/tags.c	75.00%	1 Missing and 1 partial ⚠️

Additional details and impacted files

@@             Coverage Diff              @@
##             master    #2770      +/-   ##
============================================
- Coverage     80.91%   78.07%   -2.84%     
- Complexity     2526     2535       +9     
============================================
  Files           146      174      +28     
  Lines         14713    18811    +4098     
  Branches          0      992     +992     
============================================
+ Hits          11905    14687    +2782     
- Misses         2808     3581     +773     
- Partials          0      543     +543     

Flag	Coverage Δ
appsec-extension	68.50% <87.09%> (?)
tracer-extension	78.10% <ø> (ø)
tracer-php	81.80% <0.00%> (-0.30%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
appsec/src/extension/backtrace.c	71.15% <100.00%> (ø)
appsec/src/extension/commands/request_exec.c	100.00% <100.00%> (ø)
appsec/src/extension/configuration.h	100.00% <ø> (ø)
appsec/src/extension/user_tracking.c	71.69% <100.00%> (ø)
appsec/src/extension/ddappsec.c	72.13% <87.50%> (ø)
appsec/src/extension/tags.c	79.80% <75.00%> (ø)
.../Integrations/Filesystem/FilesystemIntegration.php	0.00% <0.00%> (ø)

... and 21 files with indirect coverage changes

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 46173ca...fdbbb12. Read the comment docs.

[pr-commenter]

Benchmarks

Benchmark execution time: 2024-09-20 09:39:55

Comparing candidate commit eb254e3 in PR branch estringana/implement-lfi with baseline commit 339adfc in branch estringana/add-appsec-benchmarks.

Found 0 performance improvements and 1 performance regressions! Performance is the same for 11 metrics, 0 unstable metrics.

scenario:WordPressBench/benchWordPressOverhead-appsec

• 🟥 execution_time [+3.357ms; +3.691ms] or [+12.342%; +13.570%]

[cataphract]

I don't get this one. What it shows enabled is your TestSandboxedIntegration