优化WAF

* 信息加密使用struct代替map,以缩短加密后内容长度
* 拦截动作、人机识别动作增加是否尝试全局封禁选项
* JSCookie识别动作增加默认设置选项
* 人机识别中传入info参数异常时,尝试跳转到来源地址,避免直接提示invalid request
This commit is contained in:
GoEdgeLab
2024-04-07 14:31:22 +08:00
parent 3f012b6021
commit b772085ef2
18 changed files with 441 additions and 129 deletions

View File

@@ -1,32 +1,60 @@
// Copyright 2021 Liuxiangchao iwind.liu@gmail.com. All rights reserved.
package utils
package utils_test
import (
"github.com/TeaOSLab/EdgeNode/internal/utils"
"github.com/iwind/TeaGo/assert"
"github.com/iwind/TeaGo/maps"
"sync"
"testing"
)
func TestSimpleEncrypt(t *testing.T) {
var a = assert.NewAssertion(t)
var arr = []string{"Hello", "World", "People"}
for _, s := range arr {
var value = []byte(s)
encoded := SimpleEncrypt(value)
var encoded = utils.SimpleEncrypt(value)
t.Log(encoded, string(encoded))
decoded := SimpleDecrypt(encoded)
var decoded = utils.SimpleDecrypt(encoded)
t.Log(decoded, string(decoded))
a.IsTrue(s == string(decoded))
}
}
func TestSimpleEncryptObject(t *testing.T) {
var a = assert.NewAssertion(t)
type Obj struct {
Name string `json:"name"`
Age int `json:"age"`
}
encoded, err := utils.SimpleEncryptObject(&Obj{Name: "lily", Age: 20})
if err != nil {
t.Fatal(err)
}
var obj = &Obj{}
err = utils.SimpleDecryptObjet(encoded, obj)
if err != nil {
t.Fatal(err)
}
t.Logf("%#v", obj)
a.IsTrue(obj.Name == "lily")
a.IsTrue(obj.Age == 20)
}
func TestSimpleEncrypt_Concurrent(t *testing.T) {
wg := sync.WaitGroup{}
var wg = sync.WaitGroup{}
var arr = []string{"Hello", "World", "People"}
wg.Add(len(arr))
for _, s := range arr {
go func(s string) {
defer wg.Done()
t.Log(string(SimpleDecrypt(SimpleEncrypt([]byte(s)))))
t.Log(string(utils.SimpleDecrypt(utils.SimpleEncrypt([]byte(s)))))
}(s)
}
wg.Wait()
@@ -38,13 +66,13 @@ func TestSimpleEncryptMap(t *testing.T) {
"i": 20,
"b": true,
}
encodedResult, err := SimpleEncryptMap(m)
encodedResult, err := utils.SimpleEncryptMap(m)
if err != nil {
t.Fatal(err)
}
t.Log("result:", encodedResult)
decodedResult, err := SimpleDecryptMap(encodedResult)
decodedResult, err := utils.SimpleDecryptMap(encodedResult)
if err != nil {
t.Fatal(err)
}