aiwaf 0.1.9.2.4__tar.gz → 0.1.9.2.6__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of aiwaf might be problematic. Click here for more details.
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/PKG-INFO +1 -1
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/__init__.py +1 -1
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/middleware.py +14 -4
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf.egg-info/PKG-INFO +1 -1
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/pyproject.toml +1 -1
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/setup.py +1 -1
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/LICENSE +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/README.md +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/apps.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/blacklist_manager.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/decorators.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/__init__.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/__init__.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/add_exemption.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/add_ipexemption.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/aiwaf_diagnose.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/aiwaf_list.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/aiwaf_logging.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/aiwaf_reset.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/check_dependencies.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/clear_blacklist.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/clear_cache.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/debug_csv.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/detect_and_train.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/diagnose_blocking.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/regenerate_model.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/setup_models.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/test_exemption.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/management/commands/test_exemption_fix.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/middleware_logger.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/models.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/resources/model.pkl +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/storage.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/templatetags/__init__.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/templatetags/aiwaf_tags.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/trainer.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf/utils.py +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf.egg-info/SOURCES.txt +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf.egg-info/dependency_links.txt +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf.egg-info/requires.txt +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/aiwaf.egg-info/top_level.txt +0 -0
- {aiwaf-0.1.9.2.4 → aiwaf-0.1.9.2.6}/setup.cfg +0 -0
|
@@ -587,10 +587,20 @@ class AIAnomalyMiddleware(MiddlewareMixin):
|
|
|
587
587
|
data = [d for d in data if now - d[0] < self.WINDOW]
|
|
588
588
|
cache.set(key, data, timeout=self.WINDOW)
|
|
589
589
|
|
|
590
|
-
|
|
591
|
-
|
|
592
|
-
|
|
593
|
-
|
|
590
|
+
# Only learn keywords from 404 responses (not found) on non-existent paths
|
|
591
|
+
# This prevents learning from 403 (blocked IPs accessing legitimate paths) or other error codes
|
|
592
|
+
if (response.status_code == 404 and not known_path and not is_exempt_path(request.path)):
|
|
593
|
+
keyword_store = get_keyword_store()
|
|
594
|
+
# Get legitimate keywords to avoid learning them
|
|
595
|
+
from .trainer import get_legitimate_keywords
|
|
596
|
+
legitimate_keywords = get_legitimate_keywords()
|
|
597
|
+
|
|
598
|
+
for seg in re.split(r"\W+", request.path.lower()):
|
|
599
|
+
if (len(seg) > 3 and
|
|
600
|
+
seg not in STATIC_KW and # Don't re-learn static keywords
|
|
601
|
+
seg not in legitimate_keywords and # Don't learn legitimate keywords
|
|
602
|
+
self._is_malicious_context(request, seg)): # Only learn in malicious context
|
|
603
|
+
keyword_store.add_keyword(seg)
|
|
594
604
|
|
|
595
605
|
return response
|
|
596
606
|
|
|
@@ -9,7 +9,7 @@ long_description = (HERE / "README.md").read_text(encoding="utf-8")
|
|
|
9
9
|
|
|
10
10
|
setup(
|
|
11
11
|
name="aiwaf",
|
|
12
|
-
version="0.1.9.2.
|
|
12
|
+
version="0.1.9.2.6",
|
|
13
13
|
description="AI‑driven, self‑learning Web Application Firewall for Django",
|
|
14
14
|
long_description=long_description,
|
|
15
15
|
long_description_content_type="text/markdown",
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|