GuardianUnivalle-Benito-Yucra 0.1.10__tar.gz → 0.1.11__tar.gz

{guardianunivalle_benito_yucra-0.1.10 → guardianunivalle_benito_yucra-0.1.11}/GuardianUnivalle_Benito_Yucra/detectores/detector_sql.py

@@ -143,17 +143,14 @@ class SQLIDefenseStrongMiddleware(MiddlewareMixin):
     def process_request(self, request):
         path = request.path or ""
         client_ip = get_client_ip(request)
-        if any(
-            request.path.startswith(p)
-            for p in getattr(settings, "SQL_DEFENSE_EXEMPT_PATHS", [])
-        ):
-            return None
-        # 1) Si la ruta está exenta -> no inspeccionar
+
+        # 1) Rutas exentas
+        EXEMPT_PATHS = getattr(settings, "SQLI_EXEMPT_PATHS", [])
         for p in EXEMPT_PATHS:
             if path.startswith(p):
                 return None
 
-        # 2) Si la IP está temporalmente bloqueada
+        # 2) IP bloqueada temporalmente
         if client_ip in TEMP_BLOCK:
             if time.time() - TEMP_BLOCK[client_ip] < BLOCK_DURATION:
                 logger.warning(f"IP bloqueada temporalmente: {client_ip}")
@@ -163,17 +160,12 @@ class SQLIDefenseStrongMiddleware(MiddlewareMixin):
             else:
                 del TEMP_BLOCK[client_ip]
 
-        # 3) Bypass: JWT válido o token firmado corto (p. ej. inmediatamente después del login)
-        if is_valid_jwt(request):
-            return None
-        if is_valid_signed_bypass(request):
-            return None
-
-        # 4) Detectar SQLi
+        # 3) Extraer payload
         text = extract_payload_text(request)
         if not text:
             return None
 
+        # 4) Detectar SQLi
         flagged, matches = detect_sqli_text(text)
         if flagged:
             TEMP_BLOCK[client_ip] = time.time()

{guardianunivalle_benito_yucra-0.1.10 → guardianunivalle_benito_yucra-0.1.11}/GuardianUnivalle_Benito_Yucra.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: GuardianUnivalle-Benito-Yucra
-Version: 0.1.10
+Version: 0.1.11
 Summary: Middleware y detectores de seguridad (SQLi, XSS, CSRF, DoS, Keylogger) para Django/Flask
 Author-email: Andres Benito Calle Yucra <benitoandrescalle035@gmail.com>
 License: MIT

{guardianunivalle_benito_yucra-0.1.10 → guardianunivalle_benito_yucra-0.1.11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: GuardianUnivalle-Benito-Yucra
-Version: 0.1.10
+Version: 0.1.11
 Summary: Middleware y detectores de seguridad (SQLi, XSS, CSRF, DoS, Keylogger) para Django/Flask
 Author-email: Andres Benito Calle Yucra <benitoandrescalle035@gmail.com>
 License: MIT

{guardianunivalle_benito_yucra-0.1.10 → guardianunivalle_benito_yucra-0.1.11}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "GuardianUnivalle-Benito-Yucra"  # usar mayúsculas consistente
-version = "0.1.10"
+version = "0.1.11"
 description = "Middleware y detectores de seguridad (SQLi, XSS, CSRF, DoS, Keylogger) para Django/Flask"
 authors = [
     { name = "Andres Benito Calle Yucra", email = "benitoandrescalle035@gmail.com" }