mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-08-15 23:55:03 +03:00
131 lines
3.5 KiB
C++
131 lines
3.5 KiB
C++
/*
|
|
* ModSecurity, http://www.modsecurity.org/
|
|
* Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/)
|
|
*
|
|
* You may not use this file except in compliance with
|
|
* the License. You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* If any of the files related to licensing are missing or if you have any
|
|
* other questions related to licensing please contact Trustwave Holdings, Inc.
|
|
* directly using the email address security@modsecurity.org.
|
|
*
|
|
*/
|
|
|
|
#include "variables/variable.h"
|
|
|
|
#include <iostream>
|
|
#include <string>
|
|
#include <vector>
|
|
#include <list>
|
|
|
|
#include "modsecurity/assay.h"
|
|
#include "variations/exclusion.h"
|
|
|
|
using ModSecurity::Variables::Variations::Exclusion;
|
|
|
|
namespace ModSecurity {
|
|
namespace Variables {
|
|
|
|
|
|
Variable::Variable(std::string name)
|
|
: m_name(name),
|
|
m_collectionName("") {
|
|
|
|
if (m_name.at(0) == '\\') {
|
|
m_type = RegularExpression;
|
|
} else if (m_name.find(":") != std::string::npos) {
|
|
m_type = SingleMatch;
|
|
} else {
|
|
m_type = MultipleMatches;
|
|
}
|
|
|
|
if (m_name.find(".") != std::string::npos) {
|
|
m_kind = CollectionVarible;
|
|
m_collectionName = std::string(m_name, 0, m_name.find("."));
|
|
} else {
|
|
m_kind = DirectVariable;
|
|
}
|
|
}
|
|
|
|
|
|
Variable::Variable(std::string name, VariableKind kind)
|
|
: m_name(name),
|
|
m_collectionName(""),
|
|
m_kind(kind) {
|
|
|
|
if (m_name.at(0) == '\\') {
|
|
m_type = RegularExpression;
|
|
} else if (m_name.find(":") != std::string::npos) {
|
|
m_type = SingleMatch;
|
|
} else {
|
|
m_type = MultipleMatches;
|
|
}
|
|
|
|
if (m_name.find(".") != std::string::npos) {
|
|
m_collectionName = std::string(m_name, 0, m_name.find("."));
|
|
}
|
|
}
|
|
|
|
|
|
std::list<transaction::Variable *> *
|
|
Variable::evaluate(Assay *assay) {
|
|
std::list<transaction::Variable *> *l =
|
|
new std::list<transaction::Variable *>();
|
|
|
|
if (m_collectionName.empty() == false) {
|
|
if (m_kind == CollectionVarible && m_type == MultipleMatches) {
|
|
assay->m_collections.resolveMultiMatches(m_name, m_collectionName, l);
|
|
} if (m_kind == CollectionVarible && m_type == RegularExpression) {
|
|
assay->m_collections.resolveRegularExpression(m_name, m_collectionName, l);
|
|
} else {
|
|
assay->m_collections.resolveSingleMatch(m_name, m_collectionName, l);
|
|
}
|
|
} else {
|
|
if (m_kind == CollectionVarible && m_type == MultipleMatches) {
|
|
assay->m_collections.resolveMultiMatches(m_name, l);
|
|
} if (m_kind == CollectionVarible && m_type == RegularExpression) {
|
|
assay->m_collections.resolveRegularExpression(m_name, l);
|
|
} else {
|
|
assay->m_collections.resolveSingleMatch(m_name, l);
|
|
}
|
|
}
|
|
|
|
return l;
|
|
}
|
|
|
|
|
|
std::string Variable::to_s(
|
|
std::vector<Variable *> *variables) {
|
|
std::string ret;
|
|
std::string except("");
|
|
for (int i = 0; i < variables->size() ; i++) {
|
|
std::string name = variables->at(i)->m_name;
|
|
Exclusion *e = dynamic_cast<Exclusion *>(variables->at(i));
|
|
if (e != NULL) {
|
|
if (except.empty()) {
|
|
except = except + name;
|
|
} else {
|
|
except = except + "|" + name;
|
|
}
|
|
continue;
|
|
}
|
|
|
|
if (i == 0) {
|
|
ret = ret + name;
|
|
} else {
|
|
ret = ret + "|" + name;
|
|
}
|
|
}
|
|
|
|
if (except.empty() == false) {
|
|
ret = ret + ", except for: " + except;
|
|
}
|
|
return ret;
|
|
}
|
|
|
|
|
|
} // namespace Variables
|
|
} // namespace ModSecurity
|