github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-13 13:26:01 +03:00
Code Issues Packages Projects Releases Wiki Activity

Implements intervention support inside using chunks example

Browse Source 
In the example the disruptive action is printed in the console output.
This commit is contained in:
Felipe Zimmerle 2017-06-19 18:33:51 -03:00
parent f5b47a8077
commit 6d77c76b27
No known key found for this signature in database
GPG Key ID: E6DFB08CE8B11277
1 changed files with 52 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

68
examples/using_bodies_in_chunks/simple_request.cc
View File

@ -85,6 +85,42 @@ static void logCb(void *data, const void *ruleMessagev) {
}
}
int process_intervention(modsecurity::Transaction *transaction)
{
modsecurity::ModSecurityIntervention intervention;
intervention.status = 200;
intervention.url = NULL;
intervention.log = NULL;
intervention.disruptive = 0;
if (msc_intervention(transaction, &intervention) == 0) {
return 0;
}
if (intervention.log == NULL) {
intervention.log = strdup("(no log message was specified)");
}
std::cout << "Log: " << intervention.log << std::endl;
free(intervention.log);
if (intervention.url != NULL)
{
std::cout << "Intervention, redirect to: " << intervention.url;
std::cout << " with status code: " << intervention.status << std::endl;
free(intervention.url);
return intervention.status;
}
if (intervention.status != 200)
{
std::cout << "Intervention, returning code: " << intervention.status;
std::cout << std::endl;
return intervention.status;
}
return 0;
}
int main(int argc, char **argv) {
modsecurity::ModSecurity *modsec;
@ -129,21 +165,21 @@ int main(int argc, char **argv) {
*/
modsecurity::Transaction *modsecTransaction = \
new modsecurity::Transaction(modsec, rules, NULL);
// TODO: verify if there is any disruptive action.
process_intervention(modsecTransaction);
/**
* Initial connection setup
*
*/
modsecTransaction->processConnection(ip, 12345, "127.0.0.1", 80);
// TODO: verify if there is any disruptive action.
process_intervention(modsecTransaction);
/**
* Finally we've got the URI
*
*/
modsecTransaction->processURI(request_uri, "GET", "1.1");
// TODO: verify if there is any disruptive action.
process_intervention(modsecTransaction);
/**
* Lets add our request headers.
@ -151,14 +187,14 @@ int main(int argc, char **argv) {
*/
modsecTransaction->addRequestHeader("Host",
"net.tutsplus.com");
// TODO: verify if there is any disruptive action.
process_intervention(modsecTransaction);
/**
* No other reuqest header to add, let process it.
*
*/
modsecTransaction->processRequestHeaders();
// TODO: verify if there is any disruptive action.
process_intervention(modsecTransaction);
/**
* There is a request body to be informed...
@ -167,38 +203,38 @@ int main(int argc, char **argv) {
modsecTransaction->appendRequestBody(
(const unsigned char*)request_body_first,
strlen((const char*)request_body_first));
// TODO: verify if there is any disruptive action.
process_intervention(modsecTransaction);
modsecTransaction->appendRequestBody(
(const unsigned char*)request_body_second,
strlen((const char*)request_body_second));
// TODO: verify if there is any disruptive action.
process_intervention(modsecTransaction);
modsecTransaction->appendRequestBody(
(const unsigned char*)request_body_third,
strlen((const char*)request_body_third));
// TODO: verify if there is any disruptive action.
process_intervention(modsecTransaction);
/**
* Request body is there ;) lets process it.
*
*/
modsecTransaction->processRequestBody();
// TODO: verify if there is any disruptive action.
process_intervention(modsecTransaction);
/**
* The webserver is giving back the response headers.
*/
modsecTransaction->addResponseHeader("HTTP/1.1",
"200 OK");
// TODO: verify if there is any disruptive action.
process_intervention(modsecTransaction);
/**
* The response headers are filled in, lets process.
*
*/
modsecTransaction->processResponseHeaders(200, "HTTP 1.2");
// TODO: verify if there is any disruptive action.
process_intervention(modsecTransaction);
/**
* It is time to let modsec aware of the response body
@ -207,31 +243,31 @@ int main(int argc, char **argv) {
modsecTransaction->appendResponseBody(
(const unsigned char*)response_body_first,
strlen((const char*)response_body_first));
// TODO: verify if there is any disruptive action.
process_intervention(modsecTransaction);
modsecTransaction->appendResponseBody(
(const unsigned char*)response_body_second,
strlen((const char*)response_body_second));
// TODO: verify if there is any disruptive action.
process_intervention(modsecTransaction);
modsecTransaction->appendResponseBody(
(const unsigned char*)response_body_third,
strlen((const char*)response_body_third));
// TODO: verify if there is any disruptive action.
process_intervention(modsecTransaction);
/**
* Finally, lets have the response body processed.
*
*/
modsecTransaction->processResponseBody();
// TODO: verify if there is any disruptive action.
process_intervention(modsecTransaction);
/**
* Keeping track of everything: saving the logs.
*
*/
modsecTransaction->processLogging();
// TODO: verify if there is any disruptive action.
process_intervention(modsecTransaction);
/**