github_mirrors/openappsec
3
0
Fork 1
mirror of https://github.com/openappsec/openappsec.git synced 2025-06-28 16:41:02 +03:00
Code Issues Packages Projects Releases Wiki Activity

code sync

Browse Source
This commit is contained in:
Daniel Eisenberg 2025-02-11 17:53:45 +02:00
parent 613c878568
commit 71d1f30a9a
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
components/security_apps/waap/waap_clib/Waf2Engine.cc
View File

@ -1577,7 +1577,7 @@ Waf2Transaction::decideFinal(
dbgTrace(D_WAAP) << "Waf2Transaction::decideFinal(): got relevant API configuration from the I/S"; dbgTrace(D_WAAP) << "Waf2Transaction::decideFinal(): got relevant API configuration from the I/S";
sitePolicy = &ngenAPIConfig; sitePolicy = &ngenAPIConfig;
m_overrideState = getOverrideState(sitePolicy); m_overrideState = getOverrideState(sitePolicy);
shouldBlock = (getUserLimitVerdict() == ngx_http_cp_verdict_e::TRAFFIC_VERDICT_DROP);
} }
else if (WaapConfigApplication::getWaapSiteConfig(ngenSiteConfig)) { else if (WaapConfigApplication::getWaapSiteConfig(ngenSiteConfig)) {
dbgTrace(D_WAAP) << "Waf2Transaction::decideFinal(): got relevant Application configuration from the I/S"; dbgTrace(D_WAAP) << "Waf2Transaction::decideFinal(): got relevant Application configuration from the I/S";
@ -2208,6 +2208,11 @@ Waf2Transaction::decideAutonomousSecurity(
if (triggerLog && triggerLog->webRequests) log_all = true; if (triggerLog && triggerLog->webRequests) log_all = true;
} }
if(decision->getThreatLevel() <= ThreatLevel::THREAT_INFO && !log_all) {
decision->setLog(false);
} else {
decision->setLog(true);
}
return decision->shouldBlock(); return decision->shouldBlock();
} }