github_mirrors/attachment
3
0
Fork 1
mirror of https://github.com/openappsec/attachment.git synced 2025-12-31 05:39:07 +03:00
Code Issues Packages Projects Releases Wiki Activity

I don't know

Browse Source
This commit is contained in:
wiaamm
2025-12-07 14:31:45 +02:00
parent 704c342640
commit 7ee55e3114
1 changed files with 10 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
attachments/kong/plugins/open-appsec-waf-kong-plugin/handler.lua
View File

@@ -28,6 +28,8 @@ function NanoHandler.access(conf)
local session_data = nano.init_session(session_id) local session_data = nano.init_session(session_id)
if not session_data then if not session_data then
kong.log.err("Failed to initialize session - failing open") kong.log.err("Failed to initialize session - failing open")
-- Mark for passthrough mode to prevent OOM with large responses
kong.ctx.plugin.fail_open = true
return return
end end
@@ -161,7 +163,7 @@ end
function NanoHandler.header_filter(conf) function NanoHandler.header_filter(conf)
local ctx = kong.ctx.plugin local ctx = kong.ctx.plugin
if ctx.blocked or ctx.cleanup_needed then if ctx.blocked or ctx.cleanup_needed or ctx.fail_open then
return return
end end
@@ -198,19 +200,22 @@ function NanoHandler.body_filter(conf)
local ctx = kong.ctx.plugin local ctx = kong.ctx.plugin
local chunk = ngx.arg[1] local chunk = ngx.arg[1]
local eof = ngx.arg[2] local eof = ngx.arg[2]
if ctx.blocked or ctx.cleanup_needed then
kong.log.err("In body_filter but already blocked or cleanup needed - skipping processing ", chunk) if ctx.blocked or ctx.cleanup_needed or ctx.fail_open then
return return
end end
kong.log.err("In body_filter phase")
local session_id = ctx.session_id local session_id = ctx.session_id
local session_data = ctx.session_data local session_data = ctx.session_data
kong.log.err("Session id after")
if not session_id or not session_data or ctx.session_finalized then if not session_id or not session_data or ctx.session_finalized then
kong.log.err("Session finalized or missing session data - skipping processing ", chunk) -- Fail-open: pass through without inspection
return return
end end
kong.log.err("Session id after 2")
-- Timeout handling
if not ctx.body_filter_start_time then if not ctx.body_filter_start_time then
ctx.body_filter_start_time = ngx.now() ctx.body_filter_start_time = ngx.now()
end end