github_mirrors/attachment
3
0
Fork 1
mirror of https://github.com/openappsec/attachment.git synced 2025-12-31 05:39:07 +03:00
Code Issues Packages Projects Releases Wiki Activity

remove internal traffic check

Browse Source
This commit is contained in:
wiaamm
2025-12-07 13:08:14 +02:00
parent 176ff88f42
commit ab5aa5155f
1 changed files with 0 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
attachments/kong/plugins/open-appsec-waf-kong-plugin/handler.lua
View File

@@ -16,26 +16,6 @@ function NanoHandler.init_worker()
end end
function NanoHandler.access(conf) function NanoHandler.access(conf)
-- Skip inspection for health checks and internal requests
local path = kong.request.get_path()
local user_agent = kong.request.get_header("User-Agent") or ""
local method = kong.request.get_method()
-- Bypass health checks, status endpoints, and internal monitoring
if path == "/status" or
path == "/health" or
path:match("^/metrics") or
path:match("^/_health") or
path:match("^/kong") or -- Kong admin API paths
user_agent:match("kube%-probe") or
user_agent:match("Prometheus") or
user_agent:match("Go%-http%-client") or -- Common health checker
(method == "GET" and path == "/") then -- Root path health checks
kong.log.debug("Bypassing inspection for internal request: ", method, " ", path, " (UA: ", user_agent, ")")
kong.ctx.plugin.bypass_inspection = true
return
end
local headers = kong.request.get_headers() local headers = kong.request.get_headers()
local session_id = nano.generate_session_id() local session_id = nano.generate_session_id()
kong.service.request.set_header("x-session-id", tostring(session_id)) kong.service.request.set_header("x-session-id", tostring(session_id))