sharedsec

Documentation

Index

• func ActionsFromEntry(actionType string, params any) []sharedsec.Action
• func AddRulesMonitoringTags(th trace.TagSetter, wafDiags *waf.Diagnostics)
• func AddSecurityEvents(holder *trace.SecurityEventsHolder, limiter limiter.Limiter, matches []any)
• func AddWAFMonitoringTags(th trace.TagSetter, rulesVersion string, stats map[string]any)
• func MakeWAFRunListener[O dyngo.Operation, T dyngo.ArgOf[O]](events *trace.SecurityEventsHolder, wafCtx *waf.Context, ...) func(O, T)
• func ProcessActions(op dyngo.Operation, actions map[string]any) (interrupt bool)
• func RunWAF(wafCtx *waf.Context, values waf.RunAddressData) waf.Result

Functions

func ActionsFromEntry

func ActionsFromEntry(actionType string, params any) []sharedsec.Action

ActionsFromEntry returns one or several actions generated from the WAF returned action entry Several actions are returned when the action is of block_request type since we could be blocking HTTP or GRPC

func AddRulesMonitoringTags

func AddRulesMonitoringTags(th trace.TagSetter, wafDiags *waf.Diagnostics)

AddRulesMonitoringTags adds the tags related to security rules monitoring

func AddSecurityEvents

func AddSecurityEvents(holder *trace.SecurityEventsHolder, limiter limiter.Limiter, matches []any)

AddSecurityEvents is a helper function to add sec events to an operation taking into account the rate limiter.

func AddWAFMonitoringTags

func AddWAFMonitoringTags(th trace.TagSetter, rulesVersion string, stats map[string]any)

AddWAFMonitoringTags adds the tags related to the monitoring of the WAF

func MakeWAFRunListener

func MakeWAFRunListener[O dyngo.Operation, T dyngo.ArgOf[O]](
	events *trace.SecurityEventsHolder,
	wafCtx *waf.Context,
	limiter limiter.Limiter,
	toRunAddressData func(T) waf.RunAddressData,
) func(O, T)

func ProcessActions

func ProcessActions(op dyngo.Operation, actions map[string]any) (interrupt bool)

ProcessActions sends the relevant actions to the operation's data listener. It returns true if at least one of those actions require interrupting the request handler When SDKError is not nil, this error is sent to the op with EmitData so that the invoked SDK can return it

func RunWAF

func RunWAF(wafCtx *waf.Context, values waf.RunAddressData) waf.Result