Add server.request.body.filenames and files_content AppSec addresses for GlassFish/Payara#11267

Draft

jandro996 wants to merge 15 commits intomasterfrom

alejandro.gonzalez/APPSEC-61873-payara

Commits on May 4, 2026

feat(appsec/tomcat): add GlassFish/Payara multipart filename instrumentation
jandro996
committed
fix(appsec): add muzzleDirective and requestFilesContent to GlassFish/Payara multipart instrumentation
jandro996
committed
refactor(appsec): align GlassFish multipart advice with canonical CommonsFileUpload pattern
jandro996
committed
fix(appsec): bypass Java module-system IllegalAccessException in GlassFish multipart instrumentation
jandro996
committed
fix(appsec): protect each GlassFish multipart part iteration with per-item try/catch
jandro996
committed
revert: remove unnecessary setAccessible(true) from ParameterCollector
jandro996
committed
style: replace FQN datadog.trace.api.Config with regular import
jandro996
committed
style: skip filenames collection when filenamesCb is null
jandro996
committed

Commits on May 6, 2026