aiwaf 0.1.9.2.4__tar.gz → 0.1.9.2.5__tar.gz

{aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aiwaf
-Version: 0.1.9.2.4
+Version: 0.1.9.2.5
 Summary: AI-powered Web Application Firewall
 Home-page: https://github.com/aayushgauba/aiwaf
 Author: Aayush Gauba

{aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.5}/aiwaf/__init__.py

@@ -1,6 +1,6 @@
 default_app_config = "aiwaf.apps.AiwafConfig"
 
-__version__ = "0.1.9.2.4"
+__version__ = "0.1.9.2.5"
 
 # Note: Middleware classes are available from aiwaf.middleware
 # Import them only when needed to avoid circular imports during Django app loading

{aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.5}/aiwaf/middleware.py

@@ -587,10 +587,24 @@ class AIAnomalyMiddleware(MiddlewareMixin):
         data = [d for d in data if now - d[0] < self.WINDOW]
         cache.set(key, data, timeout=self.WINDOW)
         
-        keyword_store = get_keyword_store()
-        for seg in re.split(r"\W+", request.path.lower()):
-            if len(seg) > 3:
-                keyword_store.add_keyword(seg)
+        data.append((now, request.path, response.status_code, resp_time))
+        data = [d for d in data if now - d[0] < self.WINDOW]
+        cache.set(key, data, timeout=self.WINDOW)
+        
+        # Only learn keywords from error responses and non-existent paths
+        # This prevents learning legitimate keywords from successful requests
+        if (response.status_code >= 400 and not known_path and not is_exempt_path(request.path)):
+            keyword_store = get_keyword_store()
+            # Get legitimate keywords to avoid learning them
+            from .trainer import get_legitimate_keywords
+            legitimate_keywords = get_legitimate_keywords()
+            
+            for seg in re.split(r"\W+", request.path.lower()):
+                if (len(seg) > 3 and 
+                    seg not in STATIC_KW and  # Don't re-learn static keywords
+                    seg not in legitimate_keywords and  # Don't learn legitimate keywords
+                    self._is_malicious_context(request, seg)):  # Only learn in malicious context
+                    keyword_store.add_keyword(seg)
 
         return response
 

{aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.5}/aiwaf.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aiwaf
-Version: 0.1.9.2.4
+Version: 0.1.9.2.5
 Summary: AI-powered Web Application Firewall
 Home-page: https://github.com/aayushgauba/aiwaf
 Author: Aayush Gauba

{aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.5}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "aiwaf"
-version = "0.1.9.2.4"
+version = "0.1.9.2.5"
 description = "AI-powered Web Application Firewall"
 readme = "README.md"
 requires-python = ">=3.8"

{aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.5}/setup.py

@@ -9,7 +9,7 @@ long_description = (HERE / "README.md").read_text(encoding="utf-8")
 
 setup(
     name="aiwaf",
-    version="0.1.9.2.4",
+    version="0.1.9.2.5",
     description="AI‑driven, self‑learning Web Application Firewall for Django",
     long_description=long_description,
     long_description_content_type="text/markdown",