/* * ModSecurity, http://www.modsecurity.org/ * Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/) * * You may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * If any of the files related to licensing are missing or if you have any * other questions related to licensing please contact Trustwave Holdings, Inc. * directly using the email address security@modsecurity.org. * */ #include "variables/variable.h" #include #include #include #include #include "modsecurity/assay.h" #include "variations/exclusion.h" using ModSecurity::Variables::Variations::Exclusion; namespace ModSecurity { namespace Variables { Variable::Variable(std::string name) : m_name(name), m_collectionName("") { if (m_name.at(0) == '\\') { m_type = RegularExpression; } else if (m_name.find(":") != std::string::npos) { m_type = SingleMatch; } else { m_type = MultipleMatches; } if (m_name.find(".") != std::string::npos) { m_kind = CollectionVarible; m_collectionName = std::string(m_name, 0, m_name.find(".")); } else { m_kind = DirectVariable; } } Variable::Variable(std::string name, VariableKind kind) : m_name(name), m_collectionName(""), m_kind(kind) { if (m_name.at(0) == '\\') { m_type = RegularExpression; } else if (m_name.find(":") != std::string::npos) { m_type = SingleMatch; } else { m_type = MultipleMatches; } if (m_name.find(".") != std::string::npos) { m_collectionName = std::string(m_name, 0, m_name.find(".")); } } std::list * Variable::evaluate(Assay *assay) { std::list *l = new std::list(); if (m_collectionName.empty() == false) { if (m_kind == CollectionVarible && m_type == MultipleMatches) { assay->m_collections.resolveMultiMatches(m_name, m_collectionName, l); } if (m_kind == CollectionVarible && m_type == RegularExpression) { assay->m_collections.resolveRegularExpression(m_name, m_collectionName, l); } else { assay->m_collections.resolveSingleMatch(m_name, m_collectionName, l); } } else { if (m_kind == CollectionVarible && m_type == MultipleMatches) { assay->m_collections.resolveMultiMatches(m_name, l); } if (m_kind == CollectionVarible && m_type == RegularExpression) { assay->m_collections.resolveRegularExpression(m_name, l); } else { assay->m_collections.resolveSingleMatch(m_name, l); } } return l; } std::string Variable::to_s( std::vector *variables) { std::string ret; std::string except(""); for (int i = 0; i < variables->size() ; i++) { std::string name = variables->at(i)->m_name; Exclusion *e = dynamic_cast(variables->at(i)); if (e != NULL) { if (except.empty()) { except = except + name; } else { except = except + "|" + name; } continue; } if (i == 0) { ret = ret + name; } else { ret = ret + "|" + name; } } if (except.empty() == false) { ret = ret + ", except for: " + except; } return ret; } } // namespace Variables } // namespace ModSecurity