github_mirrors/attachment
3
0
Fork 1
mirror of https://github.com/openappsec/attachment.git synced 2025-12-31 13:49:09 +03:00
Code Issues Packages Projects Releases Wiki Activity

move ngx.arg[1] to the beginning

Browse Source
This commit is contained in:
wiaamm
2025-12-07 10:05:02 +02:00
parent 69b1578523
commit 4f2808e857
1 changed files with 2 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
attachments/kong/plugins/open-appsec-waf-kong-plugin/handler.lua
View File

@@ -249,6 +249,8 @@ function NanoHandler.header_filter(conf)
end end
function NanoHandler.body_filter(conf) function NanoHandler.body_filter(conf)
local chunk = ngx.arg[1]
local eof = ngx.arg[2]
local ctx = kong.ctx.plugin local ctx = kong.ctx.plugin
if ctx.blocked or ctx.bypass_inspection then if ctx.blocked or ctx.bypass_inspection then
return return
@@ -258,9 +260,6 @@ function NanoHandler.body_filter(conf)
local session_data = ctx.session_data local session_data = ctx.session_data
if not session_id or not session_data or ctx.session_finalized then if not session_id or not session_data or ctx.session_finalized then
-- Clear the chunk to release it from memory immediately
-- Without this, Kong holds chunks in memory causing OOM
ngx.arg[1] = nil
return return
end end
@@ -273,7 +272,6 @@ function NanoHandler.body_filter(conf)
local verdict, response, modifications = nano.end_inspection(session_id, session_data, nano.HttpChunkType.HTTP_RESPONSE_END) local verdict, response, modifications = nano.end_inspection(session_id, session_data, nano.HttpChunkType.HTTP_RESPONSE_END)
if modifications then if modifications then
local chunk = ngx.arg[1]
chunk = nano.handle_body_modifications(chunk, modifications, ctx.body_buffer_chunk or 0) chunk = nano.handle_body_modifications(chunk, modifications, ctx.body_buffer_chunk or 0)
ngx.arg[1] = chunk ngx.arg[1] = chunk
end end
@@ -300,9 +298,6 @@ function NanoHandler.body_filter(conf)
return return
end end
local chunk = ngx.arg[1]
local eof = ngx.arg[2]
if chunk and #chunk > 0 then if chunk and #chunk > 0 then
ctx.body_buffer_chunk = ctx.body_buffer_chunk or 0 ctx.body_buffer_chunk = ctx.body_buffer_chunk or 0
ctx.body_seen = true ctx.body_seen = true