优化WAF策略默认设置

* 增加JSCookie动作选项
* 拦截动作增加“失败全局封禁”选项
* 人机识别动作增加“失败全局封禁”选项
* IP名单中的“服务”文字改为“网站”
This commit is contained in:
GoEdgeLab
2024-04-07 14:20:17 +08:00
parent a5db18edd6
commit af4d19ee5a
12 changed files with 253 additions and 42 deletions

View File

@@ -2,7 +2,7 @@ Vue.component("http-firewall-block-options", {
props: ["v-block-options"],
data: function () {
return {
blockOptions: this.vBlockOptions,
options: this.vBlockOptions,
statusCode: this.vBlockOptions.statusCode,
timeout: this.vBlockOptions.timeout,
timeoutMax: this.vBlockOptions.timeoutMax,
@@ -13,25 +13,25 @@ Vue.component("http-firewall-block-options", {
statusCode: function (v) {
let statusCode = parseInt(v)
if (isNaN(statusCode)) {
this.blockOptions.statusCode = 403
this.options.statusCode = 403
} else {
this.blockOptions.statusCode = statusCode
this.options.statusCode = statusCode
}
},
timeout: function (v) {
let timeout = parseInt(v)
if (isNaN(timeout)) {
this.blockOptions.timeout = 0
this.options.timeout = 0
} else {
this.blockOptions.timeout = timeout
this.options.timeout = timeout
}
},
timeoutMax: function (v) {
let timeoutMax = parseInt(v)
if (isNaN(timeoutMax)) {
this.blockOptions.timeoutMax = 0
this.options.timeoutMax = 0
} else {
this.blockOptions.timeoutMax = timeoutMax
this.options.timeoutMax = timeoutMax
}
}
},
@@ -41,9 +41,10 @@ Vue.component("http-firewall-block-options", {
}
},
template: `<div>
<input type="hidden" name="blockOptionsJSON" :value="JSON.stringify(blockOptions)"/>
<a href="" @click.prevent="edit">状态码:{{statusCode}} / 提示内容:<span v-if="blockOptions.body != null && blockOptions.body.length > 0">[{{blockOptions.body.length}}字符]</span><span v-else class="disabled">[无]</span> <span v-if="timeout > 0"> / 封禁时长:{{timeout}}秒</span>
<input type="hidden" name="blockOptionsJSON" :value="JSON.stringify(options)"/>
<a href="" @click.prevent="edit">状态码:{{statusCode}} / 提示内容:<span v-if="options.body != null && options.body.length > 0">[{{options.body.length}}字符]</span><span v-else class="disabled">[无]</span> <span v-if="timeout > 0"> / 封禁时长:{{timeout}}秒</span>
<span v-if="timeoutMax > timeout"> / 最大封禁时长:{{timeoutMax}}秒</span>
<span v-if="options.failBlockScopeAll"> / 尝试全局封禁</span>
<i class="icon angle" :class="{up: isEditing, down: !isEditing}"></i></a>
<table class="ui table" v-show="isEditing">
<tr>
@@ -55,7 +56,7 @@ Vue.component("http-firewall-block-options", {
<tr>
<td>提示内容</td>
<td>
<textarea rows="3" v-model="blockOptions.body"></textarea>
<textarea rows="3" v-model="options.body"></textarea>
</td>
</tr>
<tr>
@@ -78,6 +79,13 @@ Vue.component("http-firewall-block-options", {
<p class="comment">如果最大封禁时长大于封禁时长({{timeout}}秒),那么表示每次封禁的时候,将会在这两个时长数字之间随机选取一个数字作为最终的封禁时长。</p>
</td>
</tr>
<tr>
<td>失败全局封禁</td>
<td>
<checkbox v-model="options.failBlockScopeAll"></checkbox>
<p class="comment">选中后表示允许系统尝试全局封禁某个IP以提升封禁性能。</p>
</td>
</tr>
</table>
</div>
`