Skip to content

Not possible to disable appsec codepaths #3846

@tommoor

Description

@tommoor

This might seem like a small issue, but I'm having huge problems with this particular code path exhausting system memory which I'll file an issue for once I'm confident of reproduction steps. In the meantime being unable to disable the code from running when there is seemingly a setting to do so is problematic.

Expected behaviour

tracer.init({
  appsec: { enabled: false },
})

or

tracer.init({
  appsec: false,
})

Should prevent /appsec/ codepaths from running

Actual behaviour

RemoteConfigManager is still polling, making requests etc.

image

Here, using 43% of heap – it should be completely disabled!

image

Environment

  • Operation system: Ubuntu 4.8.4
  • Node.js version: 20 LTS
  • Tracer version: 4.20.0
  • Agent version: N/A
  • Relevant library versions:

Metadata

Metadata

Assignees

No one assigned

    Labels

    appsecbugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions