github_mirrors/attachment
3
0
Fork 1
mirror of https://github.com/openappsec/attachment.git synced 2025-11-19 10:34:28 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix response body

Browse Source
This commit is contained in:
wiaamm
2025-11-18 00:57:52 +02:00
parent 72fdbd6501
commit c0260905a9
1 changed files with 13 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
attachments/kong/plugins/open-appsec-waf-kong-plugin/handler.lua
View File

@@ -193,18 +193,19 @@ function NanoHandler.body_filter(conf)
return return
end end
-- Process response body chunks incrementally
local chunk = ngx.arg[1] local chunk = ngx.arg[1]
local eof = ngx.arg[2] local eof = ngx.arg[2]
kong.log.debug("[body_filter] Session: ", session_id, " | Chunk size: ", chunk and #chunk or 0, " | EOF: ", tostring(eof)) kong.log.debug("[body_filter] Session: ", session_id, " | Chunk size: ", chunk and #chunk or 0, " | EOF: ", tostring(eof))
-- Send each chunk to nano service as it arrives -- Initialize chunk counter
if chunk and #chunk > 0 then if not ctx.body_buffer_chunk then
kong.log.debug("[body_filter] Session: ", session_id, " | Sending chunk to nano, size: ", #chunk, " bytes") ctx.body_buffer_chunk = 0
end
-- Initialize chunk counter -- Process ONE chunk at a time (matching nginx module behavior for response bodies)
ctx.body_buffer_chunk = ctx.body_buffer_chunk or 0 if chunk and #chunk > 0 and not ctx.chunk_sent_this_call then
kong.log.debug("[body_filter] Session: ", session_id, " | Sending chunk #", ctx.body_buffer_chunk, ", size: ", #chunk, " bytes")
local verdict, response, modifications = nano.send_body(session_id, session_data, chunk, nano.HttpChunkType.HTTP_RESPONSE_BODY) local verdict, response, modifications = nano.send_body(session_id, session_data, chunk, nano.HttpChunkType.HTTP_RESPONSE_BODY)
@@ -218,6 +219,7 @@ function NanoHandler.body_filter(conf)
ctx.body_buffer_chunk = ctx.body_buffer_chunk + 1 ctx.body_buffer_chunk = ctx.body_buffer_chunk + 1
ctx.body_seen = true ctx.body_seen = true
ctx.chunk_sent_this_call = true
if verdict == nano.AttachmentVerdict.DROP then if verdict == nano.AttachmentVerdict.DROP then
kong.log.warn("[body_filter] Body chunk verdict DROP for session: ", session_id) kong.log.warn("[body_filter] Body chunk verdict DROP for session: ", session_id)
@@ -229,9 +231,12 @@ function NanoHandler.body_filter(conf)
end end
end end
-- Reset flag for next body_filter call
ctx.chunk_sent_this_call = false
-- End inspection at EOF -- End inspection at EOF
if eof then if eof then
kong.log.debug("[body_filter] Session: ", session_id, " | EOF reached, body_seen: ", tostring(ctx.body_seen)) kong.log.debug("[body_filter] Session: ", session_id, " | EOF reached, body_seen: ", tostring(ctx.body_seen), ", chunks processed: ", ctx.body_buffer_chunk)
kong.log.debug("[body_filter] Session: ", session_id, " | Ending inspection") kong.log.debug("[body_filter] Session: ", session_id, " | Ending inspection")
local verdict, response = nano.end_inspection(session_id, session_data, nano.HttpChunkType.HTTP_RESPONSE_END) local verdict, response = nano.end_inspection(session_id, session_data, nano.HttpChunkType.HTTP_RESPONSE_END)