GuardianUnivalle-Benito-Yucra 0.1.25__py3-none-any.whl → 0.1.26__py3-none-any.whl

GuardianUnivalle_Benito_Yucra/detectores/detector_sql.py

@@ -62,17 +62,33 @@ class SQLIDefenseMiddleware(MiddlewareMixin):
     def process_request(self, request):
         client_ip = get_client_ip(request)
         trusted_ips = getattr(settings, "SQLI_DEFENSE_TRUSTED_IPS", [])
+        trusted_domains = getattr(settings, "SQLI_DEFENSE_TRUSTED_DOMAINS", [])
 
+        # ✅ Si la IP está permitida → dejar pasar
         if client_ip in trusted_ips:
             return None
 
+        # ✅ Revisar el dominio de origen
+        origin = request.META.get("HTTP_ORIGIN", "")
+        referer = request.META.get("HTTP_REFERER", "")
+
+        # extraemos solo el host (sin protocolo http/https)
+        def get_domain(url):
+            return url.replace("http://", "").replace("https://", "").split("/")[0]
+
+        origin_domain = get_domain(origin) if origin else ""
+        referer_domain = get_domain(referer) if referer else ""
+
+        if origin_domain in trusted_domains or referer_domain in trusted_domains:
+            return None  # → confiable, dejamos pasar
+
+        # 🔍 Analizamos payload
         text = extract_payload_text(request)
         if not text:
             return None
 
         flagged, descripcion = detect_sql_attack(text)
         if flagged:
-            # Solo tipo SQL, descripción con los patrones detectados
             request.sql_attack_info = {
                 "ip": client_ip,
                 "tipos": ["SQL"],
@@ -84,5 +100,4 @@ class SQLIDefenseMiddleware(MiddlewareMixin):
                 f"Ataque SQL detectado desde IP {client_ip}: {descripcion}, payload: {text}"
             )
 
-            # No devolvemos JsonResponse, solo marcamos el ataque
             return None

{guardianunivalle_benito_yucra-0.1.25.dist-info → guardianunivalle_benito_yucra-0.1.26.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: GuardianUnivalle-Benito-Yucra
-Version: 0.1.25
+Version: 0.1.26
 Summary: Middleware y detectores de seguridad (SQLi, XSS, CSRF, DoS, Keylogger) para Django/Flask
 Author-email: Andres Benito Calle Yucra <benitoandrescalle035@gmail.com>
 License: MIT

{guardianunivalle_benito_yucra-0.1.25.dist-info → guardianunivalle_benito_yucra-0.1.26.dist-info}/RECORD

@@ -7,14 +7,14 @@ GuardianUnivalle_Benito_Yucra/criptografia/kdf.py,sha256=_sbepEY1qHEKga0ExrX2WRg
 GuardianUnivalle_Benito_Yucra/detectores/detector_csrf.py,sha256=EAYfLkHuxGC5rXSu4mZJ4yZDCbwBpTX8xZWGKz7i5wA,692
 GuardianUnivalle_Benito_Yucra/detectores/detector_dos.py,sha256=lMWmCw6nccCEnek53nVjpoBCeiBqLdrSXxqRuI7VP2I,696
 GuardianUnivalle_Benito_Yucra/detectores/detector_keylogger.py,sha256=rEDG-Q_R56OsG2ypfHVBK7erolYjdvATnAxB3yvPXts,729
-GuardianUnivalle_Benito_Yucra/detectores/detector_sql.py,sha256=b7pd4-CTH0FqW5-dwA6RA38Dls0bSBXKSLlmnKbLnbA,2982
+GuardianUnivalle_Benito_Yucra/detectores/detector_sql.py,sha256=kOX-tVCSexUf4jvxM3jLl_jYBP_9YuF9-SQwLaLpAGg,3621
 GuardianUnivalle_Benito_Yucra/detectores/detector_xss.py,sha256=66V_xuxNOZEwluvWOT4-6pk5MJ3zWE1IwcVkBl7MZSg,719
 GuardianUnivalle_Benito_Yucra/middleware_web/middleware_web.py,sha256=23pLLYqliUoMrIC6ZEwz3hKXeDjWfHSm9vYPWGmDDik,495
 GuardianUnivalle_Benito_Yucra/mitigacion/limitador_peticion.py,sha256=ipMOebYhql-6mSyHs0ddYXOcXq9w8P_IXLlpiIqGncw,246
 GuardianUnivalle_Benito_Yucra/mitigacion/lista_bloqueo.py,sha256=6AYWII4mrmwCLHCvGTyoBxR4Oasr4raSHpFbVjqn7d8,193
 GuardianUnivalle_Benito_Yucra/puntuacion/puntuacion_amenaza.py,sha256=Wx5XfcII4oweLvZsTBEJ7kUc9pMpP5-36RfI5C5KJXo,561
-guardianunivalle_benito_yucra-0.1.25.dist-info/licenses/LICENSE,sha256=5e4IdL542v1E8Ft0A24GZjrxZeTsVK7XrS3mZEUhPtM,37
-guardianunivalle_benito_yucra-0.1.25.dist-info/METADATA,sha256=tDabFGJJIV1ZgFbGRy-cx-pFw9ZHMVA9WZ9lmd0Sbb4,1893
-guardianunivalle_benito_yucra-0.1.25.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-guardianunivalle_benito_yucra-0.1.25.dist-info/top_level.txt,sha256=HTWfZM64WAV_QYr5cnXnLuabQt92dvlxqlR3pCwpbDQ,30
-guardianunivalle_benito_yucra-0.1.25.dist-info/RECORD,,
+guardianunivalle_benito_yucra-0.1.26.dist-info/licenses/LICENSE,sha256=5e4IdL542v1E8Ft0A24GZjrxZeTsVK7XrS3mZEUhPtM,37
+guardianunivalle_benito_yucra-0.1.26.dist-info/METADATA,sha256=eTW0T-eW72Ycx5XPNt2VAWy0WgBV9bpY2FiSfPGzwKI,1893
+guardianunivalle_benito_yucra-0.1.26.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+guardianunivalle_benito_yucra-0.1.26.dist-info/top_level.txt,sha256=HTWfZM64WAV_QYr5cnXnLuabQt92dvlxqlR3pCwpbDQ,30
+guardianunivalle_benito_yucra-0.1.26.dist-info/RECORD,,