[WAF]规则中增加请求Header长度限制和响应Header长度限制

internal/waf/checkpoints/utils.go

@@ -2,6 +2,13 @@ package checkpoints
 
 // all check points list
 var AllCheckpoints = []*CheckpointDefinition{
+	{
+		Name:        "通用请求Header长度限制",
+		Prefix:      "requestGeneralHeaderLength",
+		Description: "通用Header比如Cache-Control、Accept之类的长度限制，防止缓冲区溢出攻击",
+		HasParams:   false,
+		Instance:    new(RequestGeneralHeaderLengthCheckpoint),
+	},
 	{
 		Name:        "客户端地址（IP）",
 		Prefix:      "remoteAddr",
@@ -184,6 +191,13 @@ var AllCheckpoints = []*CheckpointDefinition{
 		HasParams:   true,
 		Instance:    new(CCCheckpoint),
 	},
+	{
+		Name:        "通用响应Header长度限制",
+		Prefix:      "responseGeneralHeaderLength",
+		Description: "通用Header比如Cache-Control、Accept之类的长度限制，防止缓冲区溢出攻击",
+		HasParams:   false,
+		Instance:    new(ResponseGeneralHeaderLengthCheckpoint),
+	},
 	{
 		Name:        "响应状态码",
 		Prefix:      "status",