wafris 0.5.0 → 0.5.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/lua/dist/wafris_core.lua +2 -2
- data/lib/wafris/version.rb +1 -1
- data/lib/wafris.rb +0 -3
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: f036d6e75044057a673540b99fd75c7193076d755ed14ef4d34c56fa235866d1
|
|
4
|
+
data.tar.gz: 178b201063353d9805b01fa0c2752176e233886a8d8f82c41dc2ea2369bd4986
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 0c8d18daf34e516fcd69ad002060ede527806358776fb3be52ac45d3912a708a2853fedea4dcef59e75117d17f4565d82d63cefe3e146ebd524365a17910830d
|
|
7
|
+
data.tar.gz: 7b771a0c00567f4bd97054f85c867b0b6d97e2a3f1372f7be7b21121e342092edbfa2e7f894b9a6c2fba00bc3c4beae53955bc45b2dce35e2f16e04c19483c2c
|
|
@@ -99,10 +99,10 @@ increment_timebucket_for("host:", current_timebucket, host)
|
|
|
99
99
|
-- BLOCKING LOGIC
|
|
100
100
|
-- Safelist Range Check
|
|
101
101
|
-- TODO: ZRANGEBYSCORE is deprecated in Redis 6.2+. Replace with ZRANGE
|
|
102
|
-
if next(redis.call("ZRANGEBYSCORE", "allowed_ranges", client_ip_to_decimal, "+inf", "LIMIT", 0, 1)) then
|
|
102
|
+
if not next(redis.call("ZRANGEBYSCORE", "allowed_ranges", client_ip_to_decimal, "+inf", "LIMIT", 0, 1)) == nil then
|
|
103
103
|
return "Allowed"
|
|
104
104
|
-- Blocklist Range Check
|
|
105
|
-
elseif next(redis.call("ZRANGEBYSCORE", "blocked_ranges", client_ip_to_decimal, "+inf", "LIMIT", 0, 1)) then
|
|
105
|
+
elseif not next(redis.call("ZRANGEBYSCORE", "blocked_ranges", client_ip_to_decimal, "+inf", "LIMIT", 0, 1)) == nil then
|
|
106
106
|
increment_timebucket_for("wafris:blocked:", current_timebucket, client_ip)
|
|
107
107
|
return "Blocked"
|
|
108
108
|
-- No Matches
|
data/lib/wafris/version.rb
CHANGED
data/lib/wafris.rb
CHANGED
|
@@ -32,9 +32,6 @@ module Wafris
|
|
|
32
32
|
def allow_request?(request)
|
|
33
33
|
configuration.connection_pool.with do |conn|
|
|
34
34
|
time = Time.now.to_f * 1000
|
|
35
|
-
puts "WAF LOG: headers with http-x-forwarded-for key #{request.get_header(Rack::Request::HTTP_X_FORWARDED_FOR)}"
|
|
36
|
-
puts "WAF LOG: Client IP #{client_ip(request)}"
|
|
37
|
-
puts "WAF LOG: Proxy IP #{proxy_ip(request)}"
|
|
38
35
|
status = conn.evalsha(
|
|
39
36
|
configuration.core_sha,
|
|
40
37
|
argv: [
|