First release of open-appsec source code

components/security_apps/waap/waap_clib/SecurityHeadersPolicy.cc

@@ -0,0 +1,104 @@
+// Copyright (C) 2022 Check Point Software Technologies Ltd. All rights reserved.
+
+// Licensed under the Apache License, Version 2.0 (the "License");
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include "SecurityHeadersPolicy.h"
+#include "Waf2Util.h"
+
+namespace Waap {
+namespace SecurityHeaders {
+
+void
+Policy::StrictTransportSecurity::buildInjectStr() {
+    if (preload && includeSubDomains)
+    {
+        directivesStr = "max-age=" + maxAge + "; includeSubDomains; preload";
+    }
+    else if (includeSubDomains)
+    {
+        directivesStr = "max-age=" + maxAge + "; includeSubDomains";
+    }
+    else if (preload)
+    {
+        directivesStr = "max-age=" + maxAge + "; preload";
+    }
+    else
+    {
+        directivesStr = "max-age=" + maxAge;
+    }
+    headerDetails = std::make_pair(headerName, directivesStr);
+}
+
+void
+Policy::XFrameOptions::buildInjectStr() {
+    headerDetails = std::make_pair(headerName, directivesStr);
+}
+
+void
+Policy::XContentTypeOptions::buildInjectStr() {
+    headerDetails = std::make_pair(headerName, directivesStr);
+}
+
+bool
+Policy::SecurityHeadersEnforcement::operator==(const Policy::SecurityHeadersEnforcement &other) const
+{
+    return enable == other.enable;
+}
+
+bool
+Policy::XFrameOptions::operator==(const XFrameOptions &other) const
+{
+    return sameOrigin == other.sameOrigin && directivesStr == other.directivesStr &&
+        deny == other.deny && headerName == other.headerName &&
+        headerDetails.first == other.headerDetails.first  &&
+        headerDetails.second == other.headerDetails.second;
+}
+
+bool
+Policy::XContentTypeOptions::operator==(const XContentTypeOptions &other) const
+{
+    return directivesStr == other.directivesStr && headerName == other.headerName &&
+        headerDetails.first == other.headerDetails.first  && headerDetails.second == other.headerDetails.second;
+}
+
+bool
+Policy::StrictTransportSecurity::operator==(const StrictTransportSecurity &other) const
+{
+    return maxAge == other.maxAge && directivesStr == other.directivesStr &&
+        includeSubDomains == other.includeSubDomains && headerName == other.headerName &&
+        preload == other.preload && headerDetails.first == other.headerDetails.first  &&
+        headerDetails.second == other.headerDetails.second;
+}
+
+bool
+Policy::Headers::operator==(const Headers &other) const
+{
+    return other.headersInjectStr == headersInjectStr && hsts == other.hsts &&
+        xContentTypeOptions == other.xContentTypeOptions && xFrameOptions == other.xFrameOptions;
+}
+
+bool
+Policy::operator==(const Policy &other) const
+{
+    return headers == other.headers && m_securityHeaders == other.m_securityHeaders;
+}
+
+State::State(const std::shared_ptr<Policy> &policy)
+{
+    for(auto headerStr : policy->headers.headersInjectStr)
+    {
+        headersInjectStrs.push_back(headerStr);
+    }
+}
+
+}
+}