修改api

This commit is contained in:
potatso
2023-07-05 10:44:57 +08:00
parent d3fe250653
commit 531a734320
6 changed files with 35 additions and 30 deletions

View File

@@ -7,7 +7,7 @@ our $HttpConfig = <<'_EOC_';
lua_need_request_body on;
init_worker_by_lua_block{
coraza = require "resty.coraza"
waf = coraza.do_init()
waf = coraza.create_waf()
coraza.rules_add(waf, [[SecRule REQUEST_HEADERS:User-Agent "Mozilla" "phase:1, id:3,drop,status:452,log,msg:'Blocked User-Agent'"]])
}
_EOC_
@@ -15,7 +15,8 @@ _EOC_
our $LocationConfig = <<'_EOC_';
location /t {
access_by_lua_block {
coraza.do_access_filter(waf)
coraza.do_create_transaction(waf)
coraza.do_access_filter()
coraza.do_interrupt()
}
@@ -30,7 +31,7 @@ our $LocationConfig = <<'_EOC_';
log_by_lua_block{
coraza.do_log()
coraza.do_free()
coraza.do_free_transaction()
}
}
_EOC_

View File

@@ -6,17 +6,17 @@ our $HttpConfig = <<'_EOC_';
lua_code_cache on;
lua_need_request_body on;
init_worker_by_lua_block{
local coraza = require "resty.coraza"
waf = coraza.do_init()
coraza = require "resty.coraza"
waf = coraza.create_waf()
coraza.rules_add(waf, [[SecRule RESPONSE_HEADERS:Content-Type "text" "phase:3, id:4,drop,status:451,log,msg:'Blocked content-type'"]])
}
_EOC_
our $LocationConfig = <<'_EOC_';
location /t {
access_by_lua_block {
local coraza = require "resty.coraza"
coraza.do_access_filter(waf)
access_by_lua_block {
coraza.do_create_transaction(waf)
coraza.do_access_filter()
coraza.do_interrupt()
}
@@ -25,15 +25,13 @@ our $LocationConfig = <<'_EOC_';
}
header_filter_by_lua_block{
local coraza = require "resty.coraza"
coraza.do_header_filter()
coraza.do_interrupt()
}
log_by_lua_block{
local coraza = require "resty.coraza"
coraza.do_log()
coraza.do_free()
coraza.do_free_transaction()
}
}
_EOC_

View File

@@ -7,14 +7,15 @@ our $HttpConfig = <<'_EOC_';
lua_need_request_body on;
init_worker_by_lua_block{
coraza = require "resty.coraza"
waf = coraza.do_init()
waf = coraza.create_waf()
}
_EOC_
our $LocationConfig = <<'_EOC_';
location /t {
access_by_lua_block {
coraza.do_access_filter(waf)
coraza.do_create_transaction(waf)
coraza.do_access_filter()
coraza.do_interrupt()
}
@@ -29,7 +30,7 @@ our $LocationConfig = <<'_EOC_';
log_by_lua_block{
coraza.do_log()
coraza.do_free()
coraza.do_free_transaction()
}
}
_EOC_

View File

@@ -7,7 +7,7 @@ our $HttpConfig = <<'_EOC_';
lua_need_request_body on;
init_worker_by_lua_block{
coraza = require "resty.coraza"
waf = coraza.do_init()
waf = coraza.create_waf()
coraza.rules_add_file(waf, "%s/t/coraza.conf")
coraza.rules_add(waf, "Include %s/t/coreruleset/crs-setup.conf.example")
coraza.rules_add(waf, "Include %s/t/coreruleset/rules/*.conf")
@@ -19,7 +19,8 @@ $HttpConfig = sprintf($HttpConfig, $ENV{PWD}, $ENV{PWD});
our $LocationConfig = <<'_EOC_';
location /t {
access_by_lua_block {
coraza.do_access_filter(waf)
coraza.do_create_transaction(waf)
coraza.do_access_filter()
coraza.do_interrupt()
}
@@ -34,7 +35,7 @@ our $LocationConfig = <<'_EOC_';
log_by_lua_block{
coraza.do_log()
coraza.do_free()
coraza.do_free_transaction()
}
}
_EOC_