Fix tests/appsec/test_conf.py

[jandro996]

Motivation

Fix easy wins in tests/appsec/test_conf.py:

• test_disabled
• test_waf_timeout

The tests were unreliable as they only checked for the absence of an AppSec event, this is not enough as an unimplemented endpoint or a bad request pass the test

For instance the intention in test_waf_timeout is to verify that there is no event because of a timeout in the WAF. Instead, the requests were malformed, leading to errors (various 400s) and not being processed correctly.

APPSEC-54879

Changes

• test_disabled

  • Added a status check for the response to ensure the request is valid and the endpoint is implemented.
  • Excluded Sinatra variants in Ruby, which were causing 404 errors.

• test_waf_timeout

  • Added a status check for the response to ensure the request is valid and the endpoint is implemented.
  • Excluded Sinatra variants in Ruby, which were causing 404 errors.
  • Modified the payload to:
    • Reduce the URL length and number of headers (the main issue with many frameworks).
    • Increase WAF load by matching more rules.
  • Modify scenario to be able to set python to 1 microsecond (as python waf timeout is configured in milliseconds instead of microseconds)

Workflow

1. ⚠️ Create your PR as draft ⚠️
2. Work on you PR until the CI passes (if something not related to your task is failing, you can ignore it)
3. Mark it as ready for review
   • Test logic is modified? -> Get a review from RFC owner. We're working on refining the codeowners file quickly.
   • Framework is modified, or non obvious usage of it -> get a review from R&P team

🚀 Once your PR is reviewed, you can merge it!

🛟 #apm-shared-testing 🛟

Reviewer checklist

• If PR title starts with [<language>], double-check that only <language> is impacted by the change
• No system-tests internal is modified. Otherwise, I have the approval from R&P team
• CI is green, or failing jobs are not related to this change (and you are 100% sure about this statement)
• A docker base image is modified?
  • the relevant build-XXX-image label is present
• A scenario is added (or removed)?
  • Get a review from R&P team