TRKJ/EdgeNode
2
0
Fork 0
mirror of https://github.com/TeaOSLab/EdgeNode.git synced 2025-11-30 04:10:25 +08:00
Code Issues Packages Projects Releases Wiki Activity

WAF增加“包含SQL注入”操作符

Browse Source
This commit is contained in:
刘祥超
2023-12-07 20:25:35 +08:00
parent 05c98a0656
commit cc10372fe1
20 changed files with 14967 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
internal/waf/rule_test.go
View File

@@ -508,6 +508,19 @@ func TestRule_Test(t *testing.T) {
a.IsTrue(rule.Test("How are you doing"))
a.IsFalse(rule.Test("How are dare"))
}
{
var rule = NewRule()
rule.Operator = RuleOperatorContainsSQLInjection
err := rule.Init()
if err != nil {
t.Fatal(err)
}
a.IsTrue(rule.Test("id=123 OR 1=1"))
a.IsTrue(rule.Test("id=456 UNION SELECT"))
a.IsTrue(rule.Test("id=456 AND select load_file('') --"))
a.IsFalse(rule.Test("id=123"))
a.IsFalse(rule.Test("id=abc123 hello world '"))
}
}
func TestRule_MatchStar(t *testing.T) {