github_mirrors/attachment
3
0
Fork 1
mirror of https://github.com/openappsec/attachment.git synced 2026-01-02 06:34:42 +03:00
Code Issues Packages Projects Releases Wiki Activity

I don't know

Browse Source
This commit is contained in:
wiaamm
2025-12-07 14:01:50 +02:00
parent 761ffdfb68
commit 704c342640
1 changed files with 8 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
attachments/kong/plugins/open-appsec-waf-kong-plugin/handler.lua
View File

@@ -196,7 +196,10 @@ end
function NanoHandler.body_filter(conf) function NanoHandler.body_filter(conf)
local ctx = kong.ctx.plugin local ctx = kong.ctx.plugin
local chunk = ngx.arg[1]
local eof = ngx.arg[2]
if ctx.blocked or ctx.cleanup_needed then if ctx.blocked or ctx.cleanup_needed then
kong.log.err("In body_filter but already blocked or cleanup needed - skipping processing ", chunk)
return return
end end
@@ -204,6 +207,7 @@ function NanoHandler.body_filter(conf)
local session_data = ctx.session_data local session_data = ctx.session_data
if not session_id or not session_data or ctx.session_finalized then if not session_id or not session_data or ctx.session_finalized then
kong.log.err("Session finalized or missing session data - skipping processing ", chunk)
return return
end end
@@ -216,7 +220,6 @@ function NanoHandler.body_filter(conf)
local verdict, response, modifications = nano.end_inspection(session_id, session_data, nano.HttpChunkType.HTTP_RESPONSE_END) local verdict, response, modifications = nano.end_inspection(session_id, session_data, nano.HttpChunkType.HTTP_RESPONSE_END)
if modifications then if modifications then
local chunk = ngx.arg[1]
chunk = nano.handle_body_modifications(chunk, modifications, ctx.body_buffer_chunk or 0) chunk = nano.handle_body_modifications(chunk, modifications, ctx.body_buffer_chunk or 0)
ngx.arg[1] = chunk ngx.arg[1] = chunk
end end
@@ -229,19 +232,13 @@ function NanoHandler.body_filter(conf)
ngx.arg[2] = true ngx.arg[2] = true
return nano.handle_custom_response(session_data, response) return nano.handle_custom_response(session_data, response)
end end
nano.fini_session(session_data) -- Don't cleanup here - let log phase handle it
nano.cleanup_all()
-- collectgarbage("restart")
-- collectgarbage("collect")
ctx.cleanup_needed = true ctx.cleanup_needed = true
ctx.session_finalized = true -- Mark that we're in passthrough mode after timeout
ctx.session_data = nil ctx.timeout_passthrough = true
ctx.session_id = nil
return return
end end
local chunk = ngx.arg[1]
local eof = ngx.arg[2]
if chunk and #chunk > 0 then if chunk and #chunk > 0 then
ctx.body_buffer_chunk = ctx.body_buffer_chunk or 0 ctx.body_buffer_chunk = ctx.body_buffer_chunk or 0
@@ -281,14 +278,9 @@ function NanoHandler.body_filter(conf)
return nano.handle_custom_response(session_data, response) return nano.handle_custom_response(session_data, response)
end end
nano.fini_session(session_data) -- Cleanup in log phase instead
nano.cleanup_all()
-- collectgarbage("restart")
-- collectgarbage("collect")
ctx.cleanup_needed = true ctx.cleanup_needed = true
ctx.session_finalized = true ctx.session_finalized = true
ctx.session_data = nil
ctx.session_id = nil
end end
end end
end end