mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-08-14 05:45:59 +03:00
90 lines
2.2 KiB
C++
90 lines
2.2 KiB
C++
/*
|
|
* ModSecurity, http://www.modsecurity.org/
|
|
* Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/)
|
|
*
|
|
* You may not use this file except in compliance with
|
|
* the License. You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* If any of the files related to licensing are missing or if you have any
|
|
* other questions related to licensing please contact Trustwave Holdings, Inc.
|
|
* directly using the email address security@modsecurity.org.
|
|
*
|
|
*/
|
|
|
|
#include "src/variables/remote_user.h"
|
|
|
|
#include <time.h>
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
#include <sys/types.h>
|
|
#include <sys/stat.h>
|
|
#include <fcntl.h>
|
|
|
|
#include <iostream>
|
|
#include <string>
|
|
#include <vector>
|
|
#include <list>
|
|
#include <utility>
|
|
#include <memory>
|
|
|
|
#include "modsecurity/transaction.h"
|
|
#include "src/utils/base64.h"
|
|
|
|
namespace modsecurity {
|
|
namespace Variables {
|
|
|
|
|
|
void RemoteUser::evaluate(Transaction *transaction,
|
|
Rule *rule,
|
|
std::vector<const collection::Variable *> *l) {
|
|
size_t pos;
|
|
std::string base64;
|
|
collection::Variable *var;
|
|
std::string header;
|
|
|
|
std::vector<const collection::Variable *> *l2 = new std::vector<const collection::Variable *>();
|
|
transaction->m_variableRequestHeaders.resolve("authorization", l2);
|
|
|
|
if (l2->size() < 1) {
|
|
goto clear;
|
|
}
|
|
|
|
header = std::string(l2->at(0)->m_value);
|
|
|
|
if (header.compare(0, 6, "Basic ") == 0) {
|
|
base64 = std::string(header, 6, header.length());
|
|
}
|
|
|
|
base64 = Utils::Base64::decode(base64);
|
|
|
|
pos = base64.find(":");
|
|
if (pos == std::string::npos) {
|
|
goto clear;
|
|
}
|
|
transaction->m_variableRemoteUser.assign(std::string(base64, 0, pos));
|
|
|
|
var = new collection::Variable(&l2->at(0)->m_key,
|
|
&transaction->m_variableRemoteUser);
|
|
|
|
for (auto &i : l2->at(0)->m_orign) {
|
|
std::unique_ptr<VariableOrigin> origin(new VariableOrigin());
|
|
origin->m_offset = i->m_offset;
|
|
origin->m_length = i->m_length;
|
|
var->m_orign.push_back(std::move(origin));
|
|
}
|
|
l->push_back(var);
|
|
|
|
clear:
|
|
for (auto &a : *l2) {
|
|
delete a;
|
|
}
|
|
l2->clear();
|
|
delete l2;
|
|
}
|
|
|
|
|
|
} // namespace Variables
|
|
} // namespace modsecurity
|