// Copyright 2021 Liuxiangchao iwind.liu@gmail.com. All rights reserved. package checkpoints import ( "github.com/TeaOSLab/EdgeNode/internal/ttlcache" "github.com/TeaOSLab/EdgeNode/internal/waf/requests" "github.com/TeaOSLab/EdgeNode/internal/zero" "github.com/iwind/TeaGo/maps" "github.com/iwind/TeaGo/types" "path/filepath" "strings" "time" ) var ccCache = ttlcache.NewCache() var commonFileExtensionsMap = map[string]zero.Zero{ ".ico": zero.New(), ".jpg": zero.New(), ".jpeg": zero.New(), ".gif": zero.New(), ".png": zero.New(), ".webp": zero.New(), ".woff2": zero.New(), ".js": zero.New(), ".css": zero.New(), } // CC2Checkpoint 新的CC type CC2Checkpoint struct { Checkpoint } func (this *CC2Checkpoint) RequestValue(req requests.Request, param string, options maps.Map, ruleId int64) (value interface{}, hasRequestBody bool, sysErr error, userErr error) { var keys = options.GetSlice("keys") var keyValues = []string{} for _, key := range keys { keyValues = append(keyValues, req.Format(types.String(key))) } if len(keyValues) == 0 { return } var period = options.GetInt64("period") if period <= 0 { period = 60 } var threshold = options.GetInt64("threshold") if threshold <= 0 { threshold = 1000 } var ignoreCommonFiles = options.GetBool("ignoreCommonFiles") if ignoreCommonFiles { var rawReq = req.WAFRaw() if len(rawReq.Referer()) > 0 { var ext = filepath.Ext(rawReq.URL.Path) if len(ext) > 0 { _, ok := commonFileExtensionsMap[strings.ToLower(ext)] if ok { return } } } } var ccKey = "WAF-CC-" + types.String(ruleId) + "-" + strings.Join(keyValues, "@") value = ccCache.IncreaseInt64(ccKey, 1, time.Now().Unix()+period, false) return } func (this *CC2Checkpoint) ResponseValue(req requests.Request, resp *requests.Response, param string, options maps.Map, ruleId int64) (value interface{}, hasRequestBody bool, sysErr error, userErr error) { if this.IsRequest() { return this.RequestValue(req, param, options, ruleId) } return }