/* * ModSecurity, http://www.modsecurity.org/ * Copyright (c) 2015 - 2021 Trustwave Holdings, Inc. (http://www.trustwave.com/) * * You may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * If any of the files related to licensing are missing or if you have any * other questions related to licensing please contact Trustwave Holdings, Inc. * directly using the email address security@modsecurity.org. * */ #include #include #include #include #include #include "modsecurity/anchored_set_variable.h" #include "modsecurity/modsecurity.h" #include "modsecurity/transaction.h" #include "src/utils/regex.h" #include "src/variables/variable.h" namespace modsecurity { AnchoredSetVariable::AnchoredSetVariable(Transaction *t, const std::string &name) : m_transaction(t), m_name(name) { reserve(10); } AnchoredSetVariable::~AnchoredSetVariable() { unset(); } void AnchoredSetVariable::unset() { for (const auto& x : *this) { VariableValue *var = x.second; delete var; } clear(); } void AnchoredSetVariable::set(const std::string &key, const std::string &value, size_t offset, size_t len) { VariableValue *var = new VariableValue(&m_name, &key, &value); var->addOrigin(len, offset); emplace(key, var); } void AnchoredSetVariable::set(const std::string &key, const std::string &value, size_t offset) { VariableValue *var = new VariableValue(&m_name, &key, &value); var->addOrigin(value.size(), offset); emplace(key, var); } void AnchoredSetVariable::resolve( std::vector *l) { for (const auto& x : *this) { l->insert(l->begin(), new VariableValue(x.second)); } } void AnchoredSetVariable::resolve( std::vector *l, variables::KeyExclusions &ke) { for (const auto& x : *this) { if (!ke.toOmit(x.first)) { l->insert(l->begin(), new VariableValue(x.second)); } else { ms_dbg_a(m_transaction, 7, "Excluding key: " + x.first + " from target value."); } } } void AnchoredSetVariable::resolve(const std::string &key, std::vector *l) { auto range = this->equal_range(key); for (auto it = range.first; it != range.second; ++it) { l->push_back(new VariableValue(it->second)); } } std::unique_ptr AnchoredSetVariable::resolveFirst( const std::string &key) { auto range = equal_range(key); for (auto it = range.first; it != range.second; ++it) { std::unique_ptr b(new std::string()); b->assign(it->second->getValue()); return b; } return nullptr; } void AnchoredSetVariable::resolveRegularExpression(Utils::Regex *r, std::vector *l) { for (const auto& x : *this) { int ret = Utils::regex_search(x.first, *r); if (ret <= 0) { continue; } l->insert(l->begin(), new VariableValue(x.second)); } } void AnchoredSetVariable::resolveRegularExpression(Utils::Regex *r, std::vector *l, variables::KeyExclusions &ke) { for (const auto& x : *this) { int ret = Utils::regex_search(x.first, *r); if (ret <= 0) { continue; } if (!ke.toOmit(x.first)) { l->insert(l->begin(), new VariableValue(x.second)); } else { ms_dbg_a(m_transaction, 7, "Excluding key: " + x.first + " from target value."); } } } } // namespace modsecurity