wafris 0.5.0 → 0.5.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/lua/dist/wafris_core.lua +2 -2
- data/lib/wafris/version.rb +1 -1
- data/lib/wafris.rb +0 -3
- metadata +1 -1
    
        checksums.yaml
    CHANGED
    
    | @@ -1,7 +1,7 @@ | |
| 1 1 | 
             
            ---
         | 
| 2 2 | 
             
            SHA256:
         | 
| 3 | 
            -
              metadata.gz:  | 
| 4 | 
            -
              data.tar.gz:  | 
| 3 | 
            +
              metadata.gz: f036d6e75044057a673540b99fd75c7193076d755ed14ef4d34c56fa235866d1
         | 
| 4 | 
            +
              data.tar.gz: 178b201063353d9805b01fa0c2752176e233886a8d8f82c41dc2ea2369bd4986
         | 
| 5 5 | 
             
            SHA512:
         | 
| 6 | 
            -
              metadata.gz:  | 
| 7 | 
            -
              data.tar.gz:  | 
| 6 | 
            +
              metadata.gz: 0c8d18daf34e516fcd69ad002060ede527806358776fb3be52ac45d3912a708a2853fedea4dcef59e75117d17f4565d82d63cefe3e146ebd524365a17910830d
         | 
| 7 | 
            +
              data.tar.gz: 7b771a0c00567f4bd97054f85c867b0b6d97e2a3f1372f7be7b21121e342092edbfa2e7f894b9a6c2fba00bc3c4beae53955bc45b2dce35e2f16e04c19483c2c
         | 
| @@ -99,10 +99,10 @@ increment_timebucket_for("host:", current_timebucket, host) | |
| 99 99 | 
             
            -- BLOCKING LOGIC
         | 
| 100 100 | 
             
            -- Safelist Range Check
         | 
| 101 101 | 
             
            -- TODO: ZRANGEBYSCORE is deprecated in Redis 6.2+. Replace with ZRANGE
         | 
| 102 | 
            -
            if next(redis.call("ZRANGEBYSCORE", "allowed_ranges", client_ip_to_decimal, "+inf", "LIMIT", 0, 1)) then
         | 
| 102 | 
            +
            if not next(redis.call("ZRANGEBYSCORE", "allowed_ranges", client_ip_to_decimal, "+inf", "LIMIT", 0, 1)) == nil then
         | 
| 103 103 | 
             
              return "Allowed"
         | 
| 104 104 | 
             
            -- Blocklist Range Check
         | 
| 105 | 
            -
            elseif next(redis.call("ZRANGEBYSCORE", "blocked_ranges", client_ip_to_decimal, "+inf", "LIMIT", 0, 1)) then
         | 
| 105 | 
            +
            elseif not next(redis.call("ZRANGEBYSCORE", "blocked_ranges", client_ip_to_decimal, "+inf", "LIMIT", 0, 1)) == nil then
         | 
| 106 106 | 
             
              increment_timebucket_for("wafris:blocked:", current_timebucket, client_ip)
         | 
| 107 107 | 
             
              return "Blocked"
         | 
| 108 108 | 
             
            -- No Matches
         | 
    
        data/lib/wafris/version.rb
    CHANGED
    
    
    
        data/lib/wafris.rb
    CHANGED
    
    | @@ -32,9 +32,6 @@ module Wafris | |
| 32 32 | 
             
                def allow_request?(request)
         | 
| 33 33 | 
             
                  configuration.connection_pool.with do |conn|
         | 
| 34 34 | 
             
                    time = Time.now.to_f * 1000
         | 
| 35 | 
            -
                    puts "WAF LOG: headers with http-x-forwarded-for key #{request.get_header(Rack::Request::HTTP_X_FORWARDED_FOR)}"
         | 
| 36 | 
            -
                    puts "WAF LOG: Client IP #{client_ip(request)}"
         | 
| 37 | 
            -
                    puts "WAF LOG: Proxy IP #{proxy_ip(request)}"
         | 
| 38 35 | 
             
                    status = conn.evalsha(
         | 
| 39 36 | 
             
                      configuration.core_sha,
         | 
| 40 37 | 
             
                      argv: [
         |