Method checkWAFResponse

internal/nodes/http_request_waf.go:394–445

check waf outbound rules

(firewallPolicy *firewallconfigs.HTTPFirewallPolicy, resp *http.Response, forceLog bool, logRequestBody bool, ignoreRules bool)

// check waf outbound rules
func (this *HTTPRequest) checkWAFResponse(firewallPolicy *firewallconfigs.HTTPFirewallPolicy, resp *http.Response, forceLog bool, logRequestBody bool, ignoreRules bool) (blocked bool, breakChecking bool) {
	if firewallPolicy == nil || !firewallPolicy.IsOn || !firewallPolicy.Outbound.IsOn || firewallPolicy.Mode == firewallconfigs.FirewallModeBypass {
		return
	}

	// 是否执行规则
	if ignoreRules {
		return
	}

	var w = waf.SharedWAFManager.FindWAF(firewallPolicy.Id)
	if w == nil {
		return
	}

	result, err := w.MatchResponse(this, resp, this.writer)
	if err != nil {
		if !this.canIgnore(err) {
			remotelogs.Warn("HTTP_REQUEST_WAF", this.rawURI+": "+err.Error())
		}
		return
	}
	if result.IsAllowed && (len(result.AllowScope) == 0 || result.AllowScope == waf.AllowScopeGlobal) {
		breakChecking = true
	}
	if forceLog && logRequestBody && result.HasRequestBody && result.Set != nil && result.Set.HasAttackActions() {
		this.wafHasRequestBody = true
	}

	if result.Set != nil {
		if forceLog {
			this.forceLog = true
		}

		if result.Set.HasSpecialActions() {
			this.firewallPolicyId = firewallPolicy.Id
			this.firewallRuleGroupId = types.Int64(result.Group.Id)
			this.firewallRuleSetId = types.Int64(result.Set.Id)

			if result.Set.HasAttackActions() {
				this.isAttack = true
			}

			// 添加统计
			stats.SharedHTTPRequestStatManager.AddFirewallRuleGroupId(this.ReqServer.Id, this.firewallRuleGroupId, result.Set.Actions)
		}

		this.firewallActions = append(result.Set.ActionCodes(), firewallPolicy.Mode)
	}

	return !result.GoNext, breakChecking
}

// WAFRaw 原始请求
func (this *HTTPRequest) WAFRaw() *http.Request {