httpsec

Documentation

Index

• Constants
• func Install(wafHandle *waf.Handle, cfg *config.Config, lim limiter.Limiter, ...)
• func RegisterRoundTripperListener(op dyngo.Operation, events *trace.SecurityEventsHolder, wafCtx *waf.Context, ...)
• func SSRFAddressesPresent(addresses listener.AddressSet) bool

Constants

const (
	ServerRequestMethodAddr            = "server.request.method"
	ServerRequestRawURIAddr            = "server.request.uri.raw"
	ServerRequestHeadersNoCookiesAddr  = "server.request.headers.no_cookies"
	ServerRequestCookiesAddr           = "server.request.cookies"
	ServerRequestQueryAddr             = "server.request.query"
	ServerRequestPathParamsAddr        = "server.request.path_params"
	ServerRequestBodyAddr              = "server.request.body"
	ServerResponseStatusAddr           = "server.response.status"
	ServerResponseHeadersNoCookiesAddr = "server.response.headers.no_cookies"
	HTTPClientIPAddr                   = "http.client_ip"
	UserIDAddr                         = "usr.id"
	ServerIoNetURLAddr                 = "server.io.net.url"
)

HTTP rule addresses currently supported by the WAF

Functions

func Install

func Install(wafHandle *waf.Handle, cfg *config.Config, lim limiter.Limiter, root dyngo.Operation)

Install registers the HTTP WAF Event Listener on the given root operation.

func RegisterRoundTripperListener

func RegisterRoundTripperListener(op dyngo.Operation, events *trace.SecurityEventsHolder, wafCtx *waf.Context, limiter limiter.Limiter)

RegisterRoundTripperListener registers a listener on outgoing HTTP client requests to run the WAF.

func SSRFAddressesPresent

func SSRFAddressesPresent(addresses listener.AddressSet) bool