sharedsec

Documentation

Index

• func AddRulesMonitoringTags(th trace.TagSetter, wafDiags *waf.Diagnostics)
• func AddSecurityEvents(op securityEventsAdder, limiter limiter.Limiter, matches []any)
• func AddWAFMonitoringTags(th trace.TagSetter, rulesVersion string, ...)
• func ProcessActions(op dyngo.Operation, actions sharedsec.Actions, actionIds []string) (interrupt bool)
• func ProcessHTTPSDKAction(op dyngo.Operation, actions sharedsec.Actions, actionIds []string)
• func RunWAF(wafCtx *waf.Context, values waf.RunAddressData, timeout time.Duration) waf.Result

Functions

func AddRulesMonitoringTags

func AddRulesMonitoringTags(th trace.TagSetter, wafDiags *waf.Diagnostics)

Add the tags related to security rules monitoring

func AddSecurityEvents

func AddSecurityEvents(op securityEventsAdder, limiter limiter.Limiter, matches []any)

Helper function to add sec events to an operation taking into account the rate limiter.

func AddWAFMonitoringTags

func AddWAFMonitoringTags(th trace.TagSetter, rulesVersion string, overallRuntimeNs, internalRuntimeNs, timeouts uint64)

Add the tags related to the monitoring of the WAF

func ProcessActions

func ProcessActions(op dyngo.Operation, actions sharedsec.Actions, actionIds []string) (interrupt bool)

ProcessActions sends the relevant actions to the operation's data listener. It returns true if at least one of those actions require interrupting the request handler

func ProcessHTTPSDKAction

func ProcessHTTPSDKAction(op dyngo.Operation, actions sharedsec.Actions, actionIds []string)

ProcessHTTPSDKAction does two things:

• send actions to the parent operation's data listener, for their handlers to be executed after the user handler
• send an error to the current operation's data listener (created by an SDK call), to signal users to interrupt their handler.

func RunWAF

func RunWAF(wafCtx *waf.Context, values waf.RunAddressData, timeout time.Duration) waf.Result