mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-08-13 21:36:00 +03:00
5d39890783
- Renamed Transformation::evaluate to Transformation::transform to avoid
confusion with Action's overload methods.
- Updated Transformation::transform signature to receive the value by
reference and perform the transformation inline, if possible.
- Some transformations still need to use a temporary std::string to
perform their work, and then copy the result back.
- Made Transformation::transform methods const and updated Transaction
parameter to be const.
- Transaction parameter could not be removed because it's used by just
a single transformation, UrlDecodeUni.
- Removed std::string Action::evaluate(const std::string &exp,
Transaction *transaction); which was only implemented by
Transformation but was not used from the base class, but only after
downcasting to Transformation, so it can just be declared there (and
not pollute other actions with a default member implementation -that
does nothing- which is never called).
130 lines
3.1 KiB
C++
130 lines
3.1 KiB
C++
/*
|
|
* ModSecurity, http://www.modsecurity.org/
|
|
* Copyright (c) 2015 - 2021 Trustwave Holdings, Inc. (http://www.trustwave.com/)
|
|
*
|
|
* You may not use this file except in compliance with
|
|
* the License. You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* If any of the files related to licensing are missing or if you have any
|
|
* other questions related to licensing please contact Trustwave Holdings, Inc.
|
|
* directly using the email address security@modsecurity.org.
|
|
*
|
|
*/
|
|
|
|
#ifdef __cplusplus
|
|
#include <stack>
|
|
#include <vector>
|
|
#include <string>
|
|
#include <list>
|
|
#include <memory>
|
|
#include <utility>
|
|
#endif
|
|
|
|
#ifndef HEADERS_MODSECURITY_RULE_H_
|
|
#define HEADERS_MODSECURITY_RULE_H_
|
|
|
|
#include "modsecurity/transaction.h"
|
|
#include "modsecurity/modsecurity.h"
|
|
#include "modsecurity/variable_value.h"
|
|
|
|
#ifdef __cplusplus
|
|
|
|
namespace modsecurity {
|
|
namespace variables {
|
|
class Variable;
|
|
class Variables;
|
|
}
|
|
namespace actions {
|
|
class Action;
|
|
class Severity;
|
|
class LogData;
|
|
class Msg;
|
|
class Rev;
|
|
class SetVar;
|
|
class Tag;
|
|
namespace transformations {
|
|
class Transformation;
|
|
}
|
|
}
|
|
namespace operators {
|
|
class Operator;
|
|
}
|
|
|
|
using TransformationResult = std::pair<std::string,
|
|
std::shared_ptr<std::string>>;
|
|
using TransformationResults = std::list<TransformationResult>;
|
|
|
|
using Transformation = actions::transformations::Transformation;
|
|
using Transformations = std::vector<Transformation *>;
|
|
|
|
using Actions = std::vector<actions::Action *>;
|
|
|
|
using Tags = std::vector<actions::Tag *>;
|
|
using SetVars = std::vector<actions::SetVar *>;
|
|
using MatchActions = std::vector<actions::Action *>;
|
|
|
|
class Rule {
|
|
public:
|
|
Rule(std::unique_ptr<std::string> fileName, int lineNumber)
|
|
: m_fileName(std::make_shared<std::string>(*fileName)),
|
|
m_lineNumber(lineNumber),
|
|
m_phase(modsecurity::Phases::RequestHeadersPhase) {
|
|
}
|
|
|
|
Rule(const Rule &other) :
|
|
m_fileName(other.m_fileName),
|
|
m_lineNumber(other.m_lineNumber),
|
|
m_phase(other.m_phase)
|
|
{ }
|
|
|
|
Rule &operator=(const Rule& other) {
|
|
m_fileName = other.m_fileName;
|
|
m_lineNumber = other.m_lineNumber;
|
|
m_phase = other.m_phase;
|
|
return *this;
|
|
}
|
|
|
|
virtual ~Rule() {}
|
|
|
|
virtual bool evaluate(Transaction *transaction) = 0;
|
|
|
|
virtual bool evaluate(Transaction *transaction,
|
|
std::shared_ptr<RuleMessage> rm) = 0;
|
|
|
|
std::shared_ptr<std::string> getFileName() const {
|
|
return m_fileName;
|
|
}
|
|
|
|
int getLineNumber() const {
|
|
return m_lineNumber;
|
|
}
|
|
|
|
int getPhase() const { return m_phase; }
|
|
void setPhase(int phase) { m_phase = phase; }
|
|
|
|
virtual std::string getReference() {
|
|
if (m_fileName) {
|
|
return *m_fileName + ":" + std::to_string(m_lineNumber);
|
|
}
|
|
return "<<no file>>:" + std::to_string(m_lineNumber);
|
|
}
|
|
|
|
|
|
virtual bool isMarker() { return false; }
|
|
|
|
private:
|
|
std::shared_ptr<std::string> m_fileName;
|
|
int m_lineNumber;
|
|
// FIXME: phase may not be neede to SecMarker.
|
|
int m_phase;
|
|
};
|
|
|
|
|
|
} // namespace modsecurity
|
|
#endif
|
|
|
|
|
|
#endif // HEADERS_MODSECURITY_RULE_H_
|