github_mirrors/attachment
3
0
Fork 1
mirror of https://github.com/openappsec/attachment.git synced 2025-11-19 18:44:25 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix response body

Browse Source
This commit is contained in:
wiaamm
2025-11-18 00:36:27 +02:00
parent 69ee75fc94
commit 908e210af0
1 changed files with 28 additions and 46 deletions
Download Patch File Download Diff File Expand all files Collapse all files

56
attachments/kong/plugins/open-appsec-waf-kong-plugin/handler.lua
View File

@@ -135,9 +135,6 @@ function NanoHandler.access(conf)
end end
NanoHandler.processed_requests[session_id] = true NanoHandler.processed_requests[session_id] = true
-- Enable response body buffering for inspection
kong.service.request.enable_buffering()
end end
function NanoHandler.header_filter(conf) function NanoHandler.header_filter(conf)
@@ -196,54 +193,39 @@ function NanoHandler.body_filter(conf)
return return
end end
-- On first call, try to get the complete buffered body -- Collect response body chunks
if not ctx.body_processed and not ctx.response_body_buffer then
local body = kong.response.get_raw_body()
if body and #body > 0 then
kong.log.debug("[body_filter] Session: ", session_id, " | Got complete buffered body, size: ", #body, " bytes")
ctx.complete_body = body
ctx.body_processed = true
else
kong.log.debug("[body_filter] Session: ", session_id, " | No buffered body available, will collect chunks")
ctx.response_body_buffer = {}
end
end
-- If we're collecting chunks, buffer them
if ctx.response_body_buffer then
local chunk = ngx.arg[1] local chunk = ngx.arg[1]
local eof = ngx.arg[2] local eof = ngx.arg[2]
kong.log.debug("[body_filter] Session: ", session_id, " | Chunk size: ", chunk and #chunk or 0, " | EOF: ", tostring(eof)) kong.log.debug("[body_filter] Session: ", session_id, " | Chunk size: ", chunk and #chunk or 0, " | EOF: ", tostring(eof))
-- Initialize buffer on first call
if not ctx.response_body_buffer then
ctx.response_body_buffer = {}
kong.log.debug("[body_filter] Session: ", session_id, " | Initialized response body buffer")
end
-- Collect chunks
if chunk and #chunk > 0 then if chunk and #chunk > 0 then
table.insert(ctx.response_body_buffer, chunk) table.insert(ctx.response_body_buffer, chunk)
kong.log.debug("[body_filter] Session: ", session_id, " | Buffered chunk, total chunks: ", #ctx.response_body_buffer) kong.log.debug("[body_filter] Session: ", session_id, " | Buffered chunk, total chunks: ", #ctx.response_body_buffer)
end end
-- When we reach EOF, concatenate chunks -- Process complete body at EOF
if eof and #ctx.response_body_buffer > 0 then if eof then
ctx.complete_body = table.concat(ctx.response_body_buffer) kong.log.debug("[body_filter] Session: ", session_id, " | EOF reached, buffer has ", #ctx.response_body_buffer, " chunks")
kong.log.debug("[body_filter] Session: ", session_id, " | Concatenated chunks, total size: ", #ctx.complete_body, " bytes")
end
end
-- Process the complete body at EOF -- Send body to nano service if we collected chunks
local eof = ngx.arg[2] if #ctx.response_body_buffer > 0 then
if eof and not ctx.session_finalized then local complete_body = table.concat(ctx.response_body_buffer)
kong.log.debug("[body_filter] Session: ", session_id, " | EOF reached") kong.log.debug("[body_filter] Session: ", session_id, " | Sending complete body, size: ", #complete_body, " bytes")
-- Send body to nano service if we have it local verdict, response, modifications = nano.send_body(session_id, session_data, complete_body, nano.HttpChunkType.HTTP_RESPONSE_BODY)
if ctx.complete_body and #ctx.complete_body > 0 then
kong.log.debug("[body_filter] Session: ", session_id, " | Processing complete body, size: ", #ctx.complete_body, " bytes")
local verdict, response, modifications = nano.send_body(session_id, session_data, ctx.complete_body, nano.HttpChunkType.HTTP_RESPONSE_BODY)
if modifications then if modifications then
kong.log.debug("[body_filter] Session: ", session_id, " | Applying body modifications") kong.log.debug("[body_filter] Session: ", session_id, " | Applying body modifications")
ctx.complete_body = nano.handle_body_modifications(ctx.complete_body, modifications, 0) complete_body = nano.handle_body_modifications(complete_body, modifications, 0)
ngx.arg[1] = ctx.complete_body ngx.arg[1] = complete_body
end end
if verdict == nano.AttachmentVerdict.DROP then if verdict == nano.AttachmentVerdict.DROP then
@@ -255,7 +237,7 @@ function NanoHandler.body_filter(conf)
return result return result
end end
else else
kong.log.debug("[body_filter] Session: ", session_id, " | No body to process (empty response or no body expected)") kong.log.debug("[body_filter] Session: ", session_id, " | No body chunks collected (empty response or no body)")
end end
-- End inspection -- End inspection