github_mirrors/attachment
3
0
Fork 1
mirror of https://github.com/openappsec/attachment.git synced 2025-12-31 13:49:09 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix block page

Browse Source
This commit is contained in:
wiaamm
2025-12-04 14:08:27 +02:00
parent 80e48a0690
commit 88382936e6
2 changed files with 8 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
attachments/kong/plugins/open-appsec-waf-kong-plugin/handler.lua
View File

@@ -82,8 +82,6 @@ function NanoHandler.access(conf)
kong.ctx.plugin.inspection_complete = true kong.ctx.plugin.inspection_complete = true
local result = nano.handle_custom_response(session_data, response) local result = nano.handle_custom_response(session_data, response)
nano.fini_session(session_data) nano.fini_session(session_data)
-- Free response AFTER using it, then cleanup all resources
nano.free_response_immediate(response)
nano.cleanup_all() nano.cleanup_all()
kong.ctx.plugin.session_id = nil kong.ctx.plugin.session_id = nil
kong.ctx.plugin.session_data = nil kong.ctx.plugin.session_data = nil
@@ -100,7 +98,6 @@ function NanoHandler.access(conf)
kong.ctx.plugin.inspection_complete = true kong.ctx.plugin.inspection_complete = true
local result = nano.handle_custom_response(session_data, response) local result = nano.handle_custom_response(session_data, response)
nano.fini_session(session_data) nano.fini_session(session_data)
nano.free_response_immediate(response)
nano.cleanup_all() nano.cleanup_all()
kong.ctx.plugin.session_id = nil kong.ctx.plugin.session_id = nil
kong.ctx.plugin.session_data = nil kong.ctx.plugin.session_data = nil
@@ -122,7 +119,6 @@ function NanoHandler.access(conf)
kong.ctx.plugin.inspection_complete = true kong.ctx.plugin.inspection_complete = true
local result = nano.handle_custom_response(session_data, response) local result = nano.handle_custom_response(session_data, response)
nano.fini_session(session_data) nano.fini_session(session_data)
nano.free_response_immediate(response)
nano.cleanup_all() nano.cleanup_all()
kong.ctx.plugin.session_id = nil kong.ctx.plugin.session_id = nil
kong.ctx.plugin.session_data = nil kong.ctx.plugin.session_data = nil
@@ -149,7 +145,6 @@ function NanoHandler.access(conf)
kong.ctx.plugin.inspection_complete = true kong.ctx.plugin.inspection_complete = true
local result = nano.handle_custom_response(session_data, response) local result = nano.handle_custom_response(session_data, response)
nano.fini_session(session_data) nano.fini_session(session_data)
nano.free_response_immediate(response)
nano.cleanup_all() nano.cleanup_all()
kong.ctx.plugin.session_id = nil kong.ctx.plugin.session_id = nil
kong.ctx.plugin.session_data = nil kong.ctx.plugin.session_data = nil
@@ -191,7 +186,6 @@ function NanoHandler.access(conf)
kong.ctx.plugin.inspection_complete = true kong.ctx.plugin.inspection_complete = true
local result = nano.handle_custom_response(session_data, response) local result = nano.handle_custom_response(session_data, response)
nano.fini_session(session_data) nano.fini_session(session_data)
nano.free_response_immediate(response)
nano.cleanup_all() nano.cleanup_all()
kong.ctx.plugin.session_id = nil kong.ctx.plugin.session_id = nil
kong.ctx.plugin.session_data = nil kong.ctx.plugin.session_data = nil
@@ -237,7 +231,6 @@ function NanoHandler.header_filter(conf)
ctx.inspection_complete = true ctx.inspection_complete = true
local result = nano.handle_custom_response(ctx.session_data, response) local result = nano.handle_custom_response(ctx.session_data, response)
nano.fini_session(ctx.session_data) nano.fini_session(ctx.session_data)
nano.free_response_immediate(response)
nano.cleanup_all() nano.cleanup_all()
ctx.session_id = nil ctx.session_id = nil
ctx.session_data = nil ctx.session_data = nil
@@ -316,7 +309,6 @@ function NanoHandler.body_filter(conf)
ctx.inspection_complete = true ctx.inspection_complete = true
local result = nano.handle_custom_response(ctx.session_data, response) local result = nano.handle_custom_response(ctx.session_data, response)
nano.fini_session(ctx.session_data) nano.fini_session(ctx.session_data)
nano.free_response_immediate(response)
nano.cleanup_all() nano.cleanup_all()
ctx.session_id = nil ctx.session_id = nil
ctx.session_data = nil ctx.session_data = nil
@@ -360,7 +352,6 @@ function NanoHandler.body_filter(conf)
ctx.inspection_complete = true ctx.inspection_complete = true
local result = nano.handle_custom_response(ctx.session_data, response) local result = nano.handle_custom_response(ctx.session_data, response)
nano.fini_session(ctx.session_data) nano.fini_session(ctx.session_data)
nano.free_response_immediate(response)
nano.cleanup_all() nano.cleanup_all()
ctx.session_id = nil ctx.session_id = nil
ctx.session_data = nil ctx.session_data = nil

24
attachments/kong/plugins/open-appsec-waf-kong-plugin/nano_ffi.lua
View File

@@ -350,10 +350,8 @@ function nano.send_data(session_id, session_data, meta_data, header_data, contai
local verdict, response = nano_attachment.send_data(attachment, session_id, session_data, chunk_type, meta_data, header_data, contains_body) local verdict, response = nano_attachment.send_data(attachment, session_id, session_data, chunk_type, meta_data, header_data, contains_body)
-- For DROP verdicts, caller must manually free response after using it if response then
-- For other verdicts, free immediately table.insert(nano.allocated_responses, response)
if response and verdict ~= nano.AttachmentVerdict.DROP then
nano.free_response_immediate(response)
end end
return verdict, response return verdict, response
@@ -370,10 +368,8 @@ function nano.send_body(session_id, session_data, body_chunk, chunk_type)
local verdict, response, modifications = nano_attachment.send_body(attachment, session_id, session_data, body_chunk, chunk_type) local verdict, response, modifications = nano_attachment.send_body(attachment, session_id, session_data, body_chunk, chunk_type)
-- For DROP verdicts, caller must manually free response after using it if response then
-- For other verdicts, free immediately to prevent memory accumulation table.insert(nano.allocated_responses, response)
if response and verdict ~= nano.AttachmentVerdict.DROP then
nano.free_response_immediate(response)
end end
return verdict, response, modifications return verdict, response, modifications
@@ -446,10 +442,8 @@ function nano.send_response_headers(session_id, session_data, headers, status_co
content_length content_length
) )
-- For DROP verdicts, caller must manually free response after using it if response then
-- For other verdicts, free immediately table.insert(nano.allocated_responses, response)
if response and verdict ~= nano.AttachmentVerdict.DROP then
nano.free_response_immediate(response)
end end
return verdict, response return verdict, response
@@ -544,10 +538,8 @@ function nano.end_inspection(session_id, session_data, chunk_type)
local verdict, response = nano_attachment.end_inspection(attachment, session_id, session_data, chunk_type) local verdict, response = nano_attachment.end_inspection(attachment, session_id, session_data, chunk_type)
-- For DROP verdicts, caller must manually free response after using it if response then
-- For other verdicts, free immediately table.insert(nano.allocated_responses, response)
if response and verdict ~= nano.AttachmentVerdict.DROP then
nano.free_response_immediate(response)
end end
return verdict, response return verdict, response