github_mirrors/attachment
3
0
Fork 1
mirror of https://github.com/openappsec/attachment.git synced 2025-12-31 13:49:09 +03:00
Code Issues Packages Projects Releases Wiki Activity

try add chunk assignment

Browse Source
This commit is contained in:
wiaamm
2025-12-07 14:53:17 +02:00
parent 7ee55e3114
commit e183e8fa02
1 changed files with 13 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
attachments/kong/plugins/open-appsec-waf-kong-plugin/handler.lua
View File

@@ -28,8 +28,6 @@ function NanoHandler.access(conf)
local session_data = nano.init_session(session_id)
if not session_data then
kong.log.err("Failed to initialize session - failing open")
-- Mark for passthrough mode to prevent OOM with large responses
kong.ctx.plugin.fail_open = true
return
end
@@ -163,7 +161,7 @@ end
function NanoHandler.header_filter(conf)
local ctx = kong.ctx.plugin
if ctx.blocked or ctx.cleanup_needed or ctx.fail_open then
if ctx.blocked or ctx.cleanup_needed then
return
end
@@ -201,7 +199,12 @@ function NanoHandler.body_filter(conf)
local chunk = ngx.arg[1]
local eof = ngx.arg[2]
if ctx.blocked or ctx.cleanup_needed or ctx.fail_open then
if ctx.blocked or ctx.cleanup_needed then
kong.log.err("Fail-open mode - blocked chunk without inspection, chunk size: ", chunk and #chunk or 0)
if chunk then
ngx.arg[1] = chunk
end
return
end
@@ -210,7 +213,12 @@ function NanoHandler.body_filter(conf)
local session_data = ctx.session_data
kong.log.err("Session id after")
if not session_id or not session_data or ctx.session_finalized then
-- Fail-open: pass through without inspection
kong.log.err("Fail-open mode - consuming chunk without inspection, chunk size: ", chunk and #chunk or 0)
-- In fail-open, we need to consume the chunk to prevent buffering
-- Setting ngx.arg[1] to itself signals to Kong that we processed it
if chunk then
ngx.arg[1] = chunk
end
return
end
kong.log.err("Session id after 2")