mirror of
https://gitee.com/samwaf/SamWaf.git
synced 2026-11-03 19:52:14 +08:00
49 lines
2.4 KiB
Go
49 lines
2.4 KiB
Go
package wafenginecore
|
|
|
|
import (
|
|
"SamWaf/global"
|
|
"SamWaf/innerbean"
|
|
"SamWaf/model/detection"
|
|
"net/url"
|
|
"strings"
|
|
)
|
|
|
|
/*
|
|
*
|
|
检测允许的URL
|
|
返回是否满足条件
|
|
*/
|
|
func (waf *WafEngine) CheckAllowURL(weblogbean innerbean.WebLog, formValue url.Values) detection.Result {
|
|
result := detection.Result{
|
|
JumpGuardResult: false,
|
|
IsBlock: false,
|
|
Title: "",
|
|
Content: "",
|
|
}
|
|
//url白名单策略（局部）
|
|
if waf.HostTarget[weblogbean.HOST].UrlWhiteLists != nil {
|
|
for i := 0; i < len(waf.HostTarget[weblogbean.HOST].UrlWhiteLists); i++ {
|
|
if (waf.HostTarget[weblogbean.HOST].UrlWhiteLists[i].CompareType == "等于" && waf.HostTarget[weblogbean.HOST].UrlWhiteLists[i].Url == weblogbean.URL) ||
|
|
(waf.HostTarget[weblogbean.HOST].UrlWhiteLists[i].CompareType == "前缀匹配" && strings.HasPrefix(weblogbean.URL, waf.HostTarget[weblogbean.HOST].UrlWhiteLists[i].Url)) ||
|
|
(waf.HostTarget[weblogbean.HOST].UrlWhiteLists[i].CompareType == "后缀匹配" && strings.HasSuffix(weblogbean.URL, waf.HostTarget[weblogbean.HOST].UrlWhiteLists[i].Url)) ||
|
|
(waf.HostTarget[weblogbean.HOST].UrlWhiteLists[i].CompareType == "包含匹配" && strings.Contains(weblogbean.URL, waf.HostTarget[weblogbean.HOST].UrlWhiteLists[i].Url)) {
|
|
result.JumpGuardResult = true
|
|
break
|
|
}
|
|
}
|
|
}
|
|
//url白名单策略（全局）
|
|
if waf.HostTarget[global.GWAF_GLOBAL_HOST_NAME].Host.GUARD_STATUS == 1 && waf.HostTarget[global.GWAF_GLOBAL_HOST_NAME].UrlWhiteLists != nil {
|
|
for i := 0; i < len(waf.HostTarget[global.GWAF_GLOBAL_HOST_NAME].UrlWhiteLists); i++ {
|
|
if (waf.HostTarget[global.GWAF_GLOBAL_HOST_NAME].UrlWhiteLists[i].CompareType == "等于" && waf.HostTarget[global.GWAF_GLOBAL_HOST_NAME].UrlWhiteLists[i].Url == weblogbean.URL) ||
|
|
(waf.HostTarget[global.GWAF_GLOBAL_HOST_NAME].UrlWhiteLists[i].CompareType == "前缀匹配" && strings.HasPrefix(weblogbean.URL, waf.HostTarget[global.GWAF_GLOBAL_HOST_NAME].UrlWhiteLists[i].Url)) ||
|
|
(waf.HostTarget[global.GWAF_GLOBAL_HOST_NAME].UrlWhiteLists[i].CompareType == "后缀匹配" && strings.HasSuffix(weblogbean.URL, waf.HostTarget[global.GWAF_GLOBAL_HOST_NAME].UrlWhiteLists[i].Url)) ||
|
|
(waf.HostTarget[global.GWAF_GLOBAL_HOST_NAME].UrlWhiteLists[i].CompareType == "包含匹配" && strings.Contains(weblogbean.URL, waf.HostTarget[global.GWAF_GLOBAL_HOST_NAME].UrlWhiteLists[i].Url)) {
|
|
result.JumpGuardResult = true
|
|
break
|
|
}
|
|
}
|
|
}
|
|
return result
|
|
}
|