Adds support to action CtlRuleRemoteTargetByTag

This commit is contained in:
Felipe Zimmerle
2016-10-25 15:41:36 -03:00
parent 730d7dbd28
commit 9245369a54
11 changed files with 223 additions and 2 deletions

View File

@@ -0,0 +1,48 @@
/*
* ModSecurity, http://www.modsecurity.org/
* Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/)
*
* You may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* If any of the files related to licensing are missing or if you have any
* other questions related to licensing please contact Trustwave Holdings, Inc.
* directly using the email address security@modsecurity.org.
*
*/
#include "actions/ctl_rule_remove_target_by_tag.h"
#include <iostream>
#include <string>
#include "modsecurity/transaction.h"
namespace modsecurity {
namespace actions {
bool CtlRuleRemoveTargetByTag::init(std::string *error) {
std::string what(m_parser_payload, 22, m_parser_payload.size() - 22);
std::vector<std::string> param = split(what, ';');
if (param.size() < 2) {
error->assign(what + " is not a valid `TAG;VARIABLE'");
return false;
}
m_tag = param[0];
m_target = param[1];
return true;
}
bool CtlRuleRemoveTargetByTag::evaluate(Rule *rule, Transaction *transaction) {
transaction->m_ruleRemoteTargetByTag.push_back(
std::make_pair(m_tag, m_target));
return true;
}
} // namespace actions
} // namespace modsecurity

View File

@@ -0,0 +1,44 @@
/*
* ModSecurity, http://www.modsecurity.org/
* Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/)
*
* You may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* If any of the files related to licensing are missing or if you have any
* other questions related to licensing please contact Trustwave Holdings, Inc.
* directly using the email address security@modsecurity.org.
*
*/
#include <string>
#include "actions/action.h"
#include "modsecurity/transaction.h"
#include "utils.h"
#ifndef SRC_ACTIONS_CTL_RULE_REMOVE_TARGET_BY_TAG_H_
#define SRC_ACTIONS_CTL_RULE_REMOVE_TARGET_BY_TAG_H_
namespace modsecurity {
namespace actions {
class CtlRuleRemoveTargetByTag : public Action {
public:
explicit CtlRuleRemoveTargetByTag(std::string action)
: Action(action, RunTimeOnlyIfMatchKind) { }
bool init(std::string *error) override;
bool evaluate(Rule *rule, Transaction *transaction) override;
std::string m_tag;
std::string m_target;
};
} // namespace actions
} // namespace modsecurity
#endif // SRC_ACTIONS_CTL_RULE_REMOVE_TARGET_BY_TAG_H_

View File

@@ -50,8 +50,14 @@ namespace modsecurity {
namespace actions {
bool Tag::evaluate(Rule *rule, Transaction *transaction, RuleMessage *rm) {
std::string Tag::getName(Transaction *transaction) {
std::string tag = MacroExpansion::expand(m_parser_payload, transaction);
return tag;
}
bool Tag::evaluate(Rule *rule, Transaction *transaction, RuleMessage *rm) {
std::string tag = getName(transaction);
#ifndef NO_LOGS
transaction->debug(9, "Rule tag: " + tag);

View File

@@ -32,6 +32,8 @@ class Tag : public Action {
explicit Tag(std::string action)
: Action(action, RunTimeOnlyIfMatchKind) { }
std::string getName(Transaction *transaction);
bool evaluate(Rule *rule, Transaction *transaction,
RuleMessage *rm) override;
};