Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Stack Connectors][SentinelOne + Crowdstrike] Fix the validation of external API responses that return non-JSON (ex. stream) #203820

Conversation

paul-tavares
Copy link
Contributor

@paul-tavares paul-tavares commented Dec 11, 2024

Summary

  • Changes the validation for API responses from SentinelOne and Crowdstrike to allow anything
    • The prior fix changed it to validate that the responses were JSON, but the some APIs can return non-JSON: example: a stream as is the case for file download.

@paul-tavares paul-tavares added release_note:fix Team:Defend Workflows “EDR Workflows” sub-team of Security Solution backport:prev-major Backport to (8.x, 8.17, 8.16, 8.15) the previous major branch and other branches in development v8.17.1 labels Dec 11, 2024
@paul-tavares paul-tavares self-assigned this Dec 11, 2024
@paul-tavares paul-tavares marked this pull request as ready for review December 11, 2024 15:20
@paul-tavares paul-tavares requested a review from a team as a code owner December 11, 2024 15:20
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-defend-workflows (Team:Defend Workflows)

@elasticmachine
Copy link
Contributor

💚 Build Succeeded

Metrics [docs]

✅ unchanged

cc @paul-tavares

Copy link
Contributor

@tomsonpl tomsonpl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀

@paul-tavares paul-tavares merged commit 520c7c6 into elastic:main Dec 11, 2024
24 checks passed
@paul-tavares paul-tavares deleted the task/olm-203730-fix-connector-response-validations-for-non-json branch December 11, 2024 19:49
@kibanamachine
Copy link
Contributor

Starting backport for target branches: 8.15, 8.16, 8.17, 8.x

https://github.com/elastic/kibana/actions/runs/12283805628

kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Dec 11, 2024
…xternal API responses that return non-JSON (ex. stream) (elastic#203820)

## Summary

- Changes the validation for API responses from SentinelOne and
Crowdstrike to allow anything
- The prior fix changed it to validate that the responses were `JSON`,
but the some APIs can return non-JSON: example: a `stream` as is the
case for file download.

(cherry picked from commit 520c7c6)
@kibanamachine
Copy link
Contributor

💔 Some backports could not be created

Status Branch Result
8.15 Backport failed because of merge conflicts
8.16 Backport failed because of merge conflicts
8.17 Backport failed because of merge conflicts
8.x

Note: Successful backport PRs will be merged automatically after passing CI.

Manual backport

To create the backport manually run:

node scripts/backport --pr 203820

Questions ?

Please refer to the Backport tool documentation

CAWilson94 pushed a commit to CAWilson94/kibana that referenced this pull request Dec 12, 2024
…xternal API responses that return non-JSON (ex. stream) (elastic#203820)

## Summary

- Changes the validation for API responses from SentinelOne and
Crowdstrike to allow anything
- The prior fix changed it to validate that the responses were `JSON`,
but the some APIs can return non-JSON: example: a `stream` as is the
case for file download.
@kibanamachine kibanamachine added the backport missing Added to PRs automatically when the are determined to be missing a backport. label Dec 12, 2024
@kibanamachine
Copy link
Contributor

Looks like this PR has a backport PR but it still hasn't been merged. Please merge it ASAP to keep the branches relatively in sync.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport missing Added to PRs automatically when the are determined to be missing a backport. backport:prev-major Backport to (8.x, 8.17, 8.16, 8.15) the previous major branch and other branches in development release_note:fix Team:Defend Workflows “EDR Workflows” sub-team of Security Solution v8.16.2 v8.17.1 v8.18.0 v9.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants