TRKJ/EdgeNode
2
0
Fork 0
mirror of https://github.com/TeaOSLab/EdgeNode.git synced 2025-12-25 06:26:34 +08:00
Code Issues Packages Projects Releases Wiki Activity

WAF增加“在IP列表内”操作符/优化部分操作符代号

Browse Source
This commit is contained in:
刘祥超
2023-01-08 10:15:46 +08:00
parent 8e68da7725
commit a2e6aaaa18
4 changed files with 14 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
internal/waf/rule.go
View File

@@ -50,6 +50,7 @@ type Rule struct {
ipRangeListValue *values.IPRangeList
stringValues []string
ipList *values.StringList
floatValue float64
reg *re.Regexp
@@ -122,6 +123,8 @@ func (this *Rule) Init() error {
if !this.isIP {
return errors.New("value should be a valid ip")
}
case RuleOperatorInIPList:
this.ipList = values.ParseStringList(this.Value, true)
case RuleOperatorIPRange, RuleOperatorNotIPRange:
this.ipRangeListValue = values.ParseIPRangeList(this.Value)
}
@@ -584,12 +587,12 @@ func (this *Rule) Test(value interface{}) bool {
case RuleOperatorNotIPRange:
return !this.containsIP(value)
case RuleOperatorIPMod:
pieces := strings.SplitN(this.Value, ",", 2)
var pieces = strings.SplitN(this.Value, ",", 2)
if len(pieces) == 1 {
rem := types.Int64(pieces[0])
var rem = types.Int64(pieces[0])
return this.ipToInt64(net.ParseIP(types.String(value)))%10 == rem
}
div := types.Int64(pieces[0])
var div = types.Int64(pieces[0])
if div == 0 {
return false
}
@@ -599,6 +602,11 @@ func (this *Rule) Test(value interface{}) bool {
return this.ipToInt64(net.ParseIP(types.String(value)))%10 == types.Int64(this.Value)
case RuleOperatorIPMod100:
return this.ipToInt64(net.ParseIP(types.String(value)))%100 == types.Int64(this.Value)
case RuleOperatorInIPList:
if this.ipList != nil {
return this.ipList.Contains(types.String(value))
}
return false
}
return false
}