/* * ModSecurity, http://www.modsecurity.org/ * Copyright (c) 2015 - 2020 Trustwave Holdings, Inc. (http://www.trustwave.com/) * * You may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * If any of the files related to licensing are missing or if you have any * other questions related to licensing please contact Trustwave Holdings, Inc. * directly using the email address security@modsecurity.org. * */ #include "modsecurity/rules_exceptions.h" #include #include "src/utils/string.h" #include "src/variables/variable.h" #include "src/actions/action_type_rule_metadata.h" #include "src/actions/transformations/transformation.h" namespace modsecurity { RulesExceptions::RulesExceptions() { } RulesExceptions::~RulesExceptions() { } bool RulesExceptions::loadUpdateActionById(RuleId id, std::unique_ptr > > actions, std::string *error) { for (auto &a : *actions) { if (dynamic_cast(a.get())) { std::cout << "General failure, action: " << *a->getName(); std::cout << " has not expected to be used with UpdateActionByID."; std::cout << std::endl; continue; } if (dynamic_cast(a.get())) { actions::transformations::Transformation *t = dynamic_cast(a.release()); m_action_transformation_update_target_by_id.emplace( std::pair>(id, std::shared_ptr(t)) ); continue; } m_action_pos_update_target_by_id.emplace( std::pair>(id , std::move(a)) ); } return true; } bool RulesExceptions::loadRemoveRuleByMsg(const std::string &msg, std::string *error) { m_remove_rule_by_msg.push_back(msg); return true; } bool RulesExceptions::loadRemoveRuleByTag(const std::string &msg, std::string *error) { m_remove_rule_by_tag.push_back(msg); return true; } bool RulesExceptions::loadUpdateTargetByMsg(const std::string &msg, std::unique_ptr > > var, std::string *error) { for (auto &i : *var) { m_variable_update_target_by_msg.emplace( std::pair, std::unique_ptr>( std::make_shared(msg), std::move(i))); } return true; } bool RulesExceptions::loadUpdateTargetByTag(const std::string &tag, std::unique_ptr > > var, std::string *error) { for (auto &i : *var) { m_variable_update_target_by_tag.emplace( std::pair, std::unique_ptr>( std::make_shared(tag), std::move(i))); } return true; } bool RulesExceptions::loadUpdateTargetById(RuleId id, std::unique_ptr > > var, std::string *error) { for (auto &i : *var) { m_variable_update_target_by_id.emplace( std::pair>(id, std::move(i))); } return true; } bool RulesExceptions::load(const std::string &a, std::string *error) { bool added = false; std::vector toRemove = utils::string::ssplit(a, ' '); for (std::string &r : toRemove) { std::string b = modsecurity::utils::string::parserSanitizer(r); if (b.size() == 0) { continue; } size_t dash = b.find('-'); if (dash != std::string::npos) { std::string n1s = std::string(b, 0, dash); std::string n2s = std::string(b, dash + 1, b.size() - (dash + 1)); std::istringstream n1ss(n1s), n2ss(n2s); RuleId n1n = 0; RuleId n2n = 0; n1ss >> n1n; if (n1ss.fail()) { error->assign("Not a number: " + n1s); return false; } n2ss >> n2n; if (n2ss.fail()) { error->assign("Not a number: " + n2s); return false; } if (n1s > n2s) { error->assign("Invalid range: " + b); return false; } addRange(n1n, n2n); added = true; } else { std::istringstream iss(b); RuleId num; iss >> num; if (iss.fail()) { error->assign("Not a number or range: " + b); return false; } addNumber(num); added = true; } } if (added) { return true; } error->assign("Not a number or range: " + a); return false; } bool RulesExceptions::addNumber(RuleId a) { m_numbers.push_back(a); return true; } bool RulesExceptions::addRange(RuleId a, RuleId b) { m_ranges.push_back(std::make_pair(a, b)); return true; } bool RulesExceptions::contains(RuleId a) { for (RuleId z : m_numbers) { if (a == z) { return true; } } for (auto z : m_ranges) { if (z.first <= a && z.second >= a) { return true; } } return false; } bool RulesExceptions::merge(RulesExceptions *from) { for (RuleId a : from->m_numbers) { bool ret = addNumber(a); if (ret == false) { return ret; } } for (auto b : from->m_ranges) { bool ret = addRange(b.first, b.second); if (ret == false) { return ret; } } for (auto &p : from->m_variable_update_target_by_tag) { m_variable_update_target_by_tag.emplace( std::pair, std::shared_ptr>(p.first, p.second)); } for (auto &p : from->m_variable_update_target_by_msg) { m_variable_update_target_by_msg.emplace( std::pair, std::shared_ptr>(p.first, p.second)); } for (auto &p : from->m_variable_update_target_by_id) { m_variable_update_target_by_id.emplace( std::pair>(p.first, p.second)); } for (auto &p : from->m_action_pos_update_target_by_id) { m_action_pos_update_target_by_id.emplace( std::pair>(p.first, p.second)); } for (auto &p : from->m_action_transformation_update_target_by_id) { m_action_transformation_update_target_by_id.emplace( std::pair>(p.first, p.second)); } for (auto &p : from->m_remove_rule_by_msg) { m_remove_rule_by_msg.push_back(p); } for (auto &p : from->m_remove_rule_by_tag) { m_remove_rule_by_tag.push_back(p); } return true; } } // namespace modsecurity