GuardianUnivalle-Benito-Yucra 0.1.21__tar.gz → 0.1.23__tar.gz

{guardianunivalle_benito_yucra-0.1.21 → guardianunivalle_benito_yucra-0.1.23}/GuardianUnivalle_Benito_Yucra/detectores/detector_sql.py

@@ -59,6 +59,37 @@ def get_client_ip(request):
 
 
 class SQLIDefenseMiddleware(MiddlewareMixin):
+    def process_request(self, request):
+        # Excluir paths primero
+        exempt_paths = getattr(settings, "SQLI_DEFENSE_EXEMPT_PATHS", [])
+        if any(request.path.startswith(p) for p in exempt_paths):
+            return None  # ← Importante: NO analizar payload
+
+        # Solo después chequea IPs confiables
+        client_ip = get_client_ip(request)
+        trusted_ips = getattr(settings, "SQLI_DEFENSE_TRUSTED_IPS", [])
+        if client_ip in trusted_ips:
+            return None
+
+        text = extract_payload_text(request)
+        if not text:
+            return None
+
+        flagged, descripcion = detect_sql_attack(text)
+        if flagged:
+            request.sql_attack_info = {
+                "ip": client_ip,
+                "tipos": ["SQL"],
+                "descripcion": descripcion,
+                "payload": text,
+            }
+            logger.warning(
+                f"Ataque SQL detectado desde IP {client_ip}: {descripcion}, payload: {text}"
+            )
+        return None
+
+
+""" class SQLIDefenseMiddleware(MiddlewareMixin):
     def process_request(self, request):
         client_ip = get_client_ip(request)
         trusted_ips = getattr(settings, "SQLI_DEFENSE_TRUSTED_IPS", [])
@@ -88,4 +119,4 @@ class SQLIDefenseMiddleware(MiddlewareMixin):
                 f"Ataque SQL detectado desde IP {client_ip}: {descripcion}, payload: {text}"
             )
             # No devolvemos JsonResponse, solo marcamos el ataque
-            return None
+            return None """

{guardianunivalle_benito_yucra-0.1.21 → guardianunivalle_benito_yucra-0.1.23}/GuardianUnivalle_Benito_Yucra.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: GuardianUnivalle-Benito-Yucra
-Version: 0.1.21
+Version: 0.1.23
 Summary: Middleware y detectores de seguridad (SQLi, XSS, CSRF, DoS, Keylogger) para Django/Flask
 Author-email: Andres Benito Calle Yucra <benitoandrescalle035@gmail.com>
 License: MIT

{guardianunivalle_benito_yucra-0.1.21 → guardianunivalle_benito_yucra-0.1.23}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: GuardianUnivalle-Benito-Yucra
-Version: 0.1.21
+Version: 0.1.23
 Summary: Middleware y detectores de seguridad (SQLi, XSS, CSRF, DoS, Keylogger) para Django/Flask
 Author-email: Andres Benito Calle Yucra <benitoandrescalle035@gmail.com>
 License: MIT

{guardianunivalle_benito_yucra-0.1.21 → guardianunivalle_benito_yucra-0.1.23}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "GuardianUnivalle-Benito-Yucra"  # usar mayúsculas consistente
-version = "0.1.21"
+version = "0.1.23"
 description = "Middleware y detectores de seguridad (SQLi, XSS, CSRF, DoS, Keylogger) para Django/Flask"
 authors = [
     { name = "Andres Benito Calle Yucra", email = "benitoandrescalle035@gmail.com" }