diff --git a/internal/nodes/http_request.go b/internal/nodes/http_request.go index e8f744e..7ad7fc5 100644 --- a/internal/nodes/http_request.go +++ b/internal/nodes/http_request.go @@ -237,6 +237,14 @@ func (this *HTTPRequest) Do() { } } + // UA名单 + if !this.isSubRequest && this.web.UserAgent != nil && this.web.UserAgent.IsOn { + if this.doCheckUserAgent() { + this.doEnd() + return + } + } + // 访问控制 if !this.isSubRequest && this.web.Auth != nil && this.web.Auth.IsOn { if this.doAuth() { @@ -526,6 +534,11 @@ func (this *HTTPRequest) configureWeb(web *serverconfigs.HTTPWebConfig, isTop bo this.web.Referers = web.Referers } + // user agent + if web.UserAgent != nil && (web.UserAgent.IsPrior || isTop) { + this.web.UserAgent = web.UserAgent + } + // request limit if web.RequestLimit != nil && (web.RequestLimit.IsPrior || isTop) { this.web.RequestLimit = web.RequestLimit diff --git a/internal/nodes/http_request_user_agent.go b/internal/nodes/http_request_user_agent.go new file mode 100644 index 0000000..87c2357 --- /dev/null +++ b/internal/nodes/http_request_user_agent.go @@ -0,0 +1,24 @@ +// Copyright 2022 Liuxiangchao iwind.liu@gmail.com. All rights reserved. Official site: https://goedge.cn . + +package nodes + +import ( + "net/http" +) + +func (this *HTTPRequest) doCheckUserAgent() (shouldStop bool) { + if this.web.UserAgent == nil { + return + } + + const cacheSeconds = "3600" // 时间不能过长,防止修改设置后长期无法生效 + + if !this.web.UserAgent.AllowRequest(this.RawReq) { + this.tags = append(this.tags, "userAgentCheck") + this.writer.Header().Set("Cache-Control", "max-age="+cacheSeconds) + this.writeCode(http.StatusForbidden, "The User-Agent has been blocked.", "当前访问已被UA名单拦截。") + return true + } + + return +}