aiwaf 0.1.9.2.5__tar.gz → 0.1.9.2.7__tar.gz

{aiwaf-0.1.9.2.5 → aiwaf-0.1.9.2.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aiwaf
-Version: 0.1.9.2.5
+Version: 0.1.9.2.7
 Summary: AI-powered Web Application Firewall
 Home-page: https://github.com/aayushgauba/aiwaf
 Author: Aayush Gauba

{aiwaf-0.1.9.2.5 → aiwaf-0.1.9.2.7}/aiwaf/__init__.py

@@ -1,6 +1,6 @@
 default_app_config = "aiwaf.apps.AiwafConfig"
 
-__version__ = "0.1.9.2.5"
+__version__ = "0.1.9.2.7"
 
 # Note: Middleware classes are available from aiwaf.middleware
 # Import them only when needed to avoid circular imports during Django app loading

{aiwaf-0.1.9.2.5 → aiwaf-0.1.9.2.7}/aiwaf/middleware.py

@@ -85,6 +85,7 @@ class IPAndKeywordBlockMiddleware:
         self.safe_prefixes = self._collect_safe_prefixes()
         self.exempt_keywords = self._get_exempt_keywords()
         self.legitimate_path_keywords = self._get_legitimate_path_keywords()
+        self.malicious_keywords = set(STATIC_KW)  # Initialize malicious keywords
 
     def _get_exempt_keywords(self):
         """Get keywords that should be exempt from blocking"""
@@ -439,6 +440,7 @@ class AIAnomalyMiddleware(MiddlewareMixin):
         super().__init__(get_response)
         # Use the safely loaded global MODEL instead of loading again
         self.model = MODEL
+        self.malicious_keywords = set(STATIC_KW)  # Initialize malicious keywords
 
     def _is_malicious_context(self, request, keyword):
         """
@@ -587,13 +589,9 @@ class AIAnomalyMiddleware(MiddlewareMixin):
         data = [d for d in data if now - d[0] < self.WINDOW]
         cache.set(key, data, timeout=self.WINDOW)
         
-        data.append((now, request.path, response.status_code, resp_time))
-        data = [d for d in data if now - d[0] < self.WINDOW]
-        cache.set(key, data, timeout=self.WINDOW)
-        
-        # Only learn keywords from error responses and non-existent paths
-        # This prevents learning legitimate keywords from successful requests
-        if (response.status_code >= 400 and not known_path and not is_exempt_path(request.path)):
+        # Only learn keywords from 404 responses (not found) on non-existent paths
+        # This prevents learning from 403 (blocked IPs accessing legitimate paths) or other error codes
+        if (response.status_code == 404 and not known_path and not is_exempt_path(request.path)):
             keyword_store = get_keyword_store()
             # Get legitimate keywords to avoid learning them
             from .trainer import get_legitimate_keywords

{aiwaf-0.1.9.2.5 → aiwaf-0.1.9.2.7}/aiwaf.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aiwaf
-Version: 0.1.9.2.5
+Version: 0.1.9.2.7
 Summary: AI-powered Web Application Firewall
 Home-page: https://github.com/aayushgauba/aiwaf
 Author: Aayush Gauba

{aiwaf-0.1.9.2.5 → aiwaf-0.1.9.2.7}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "aiwaf"
-version = "0.1.9.2.5"
+version = "0.1.9.2.7"
 description = "AI-powered Web Application Firewall"
 readme = "README.md"
 requires-python = ">=3.8"

{aiwaf-0.1.9.2.5 → aiwaf-0.1.9.2.7}/setup.py

@@ -9,7 +9,7 @@ long_description = (HERE / "README.md").read_text(encoding="utf-8")
 
 setup(
     name="aiwaf",
-    version="0.1.9.2.5",
+    version="0.1.9.2.7",
     description="AI‑driven, self‑learning Web Application Firewall for Django",
     long_description=long_description,
     long_description_content_type="text/markdown",