Sha256: f763022625488ef12ebdac6756882ca9b8bcb07673b75b25a88c7eb51cad5a67
Contents?: true
Size: 1.92 KB
Versions: 21
Compression:
Stored size: 1.92 KB
Contents
# frozen_string_literal: true
module Datadog
module AppSec
module Contrib
module Rack
module Reactive
# Dispatch data from a Rack request to the WAF context
module RequestBody
ADDRESSES = [
'request.body',
].freeze
private_constant :ADDRESSES
def self.publish(op, gateway_request)
catch(:block) do
# params have been parsed from the request body
op.publish('request.body', gateway_request.form_hash)
nil
end
end
def self.subscribe(op, waf_context)
op.subscribe(*ADDRESSES) do |*values|
Datadog.logger.debug { "reacted to #{ADDRESSES.inspect}: #{values.inspect}" }
body = values[0]
waf_args = {
'server.request.body' => body,
}
waf_timeout = Datadog.configuration.appsec.waf_timeout
result = waf_context.run(waf_args, waf_timeout)
Datadog.logger.debug { "WAF TIMEOUT: #{result.inspect}" } if result.timeout
case result.status
when :match
Datadog.logger.debug { "WAF: #{result.inspect}" }
yield result
throw(:block, true) unless result.actions.empty?
when :ok
Datadog.logger.debug { "WAF OK: #{result.inspect}" }
when :invalid_call
Datadog.logger.debug { "WAF CALL ERROR: #{result.inspect}" }
when :invalid_rule, :invalid_flow, :no_rule
Datadog.logger.debug { "WAF RULE ERROR: #{result.inspect}" }
else
Datadog.logger.debug { "WAF UNKNOWN: #{result.status.inspect} #{result.inspect}" }
end
end
end
end
end
end
end
end
end
Version data entries
21 entries across 21 versions & 2 rubygems