Method Run

internal/waf/get302_validator.go:22–91

(request requests.Request, writer http.ResponseWriter)

}

func (this *Get302Validator) Run(request requests.Request, writer http.ResponseWriter) {
	var info = request.WAFRaw().URL.Query().Get("info")
	if len(info) == 0 {
		request.ProcessResponseHeaders(writer.Header(), http.StatusBadRequest)
		writer.WriteHeader(http.StatusBadRequest)
		_, _ = writer.Write([]byte("invalid request (002)"))
		return
	}

	var timestamp int64
	var life int64
	var setId int64
	var policyId int64
	var groupId int64
	var scope string
	var url string

	var infoArg = &InfoArg{}
	decodeErr := infoArg.Decode(info)
	var success bool
	if decodeErr == nil && infoArg.IsValid() {
		success = true

		timestamp = infoArg.Timestamp
		life = int64(infoArg.Life)
		setId = infoArg.SetId
		policyId = infoArg.PolicyId
		groupId = infoArg.GroupId
		scope = infoArg.Scope
		url = infoArg.URL
	} else {
		// 兼容老版本
		m, decodeMapErr := utils.SimpleDecryptMap(info)
		if decodeMapErr == nil {
			success = true

			timestamp = m.GetInt64("timestamp")
			life = m.GetInt64("life")
			setId = m.GetInt64("setId")
			policyId = m.GetInt64("policyId")
			groupId = m.GetInt64("groupId")
			scope = m.GetString("scope")
			url = m.GetString("url")
		}
	}

	if !success {
		request.ProcessResponseHeaders(writer.Header(), http.StatusBadRequest)
		writer.WriteHeader(http.StatusBadRequest)
		_, _ = writer.Write([]byte("invalid request (003)"))
		return
	}

	if time.Now().Unix()-timestamp > 5 { // 超过5秒认为失效
		request.ProcessResponseHeaders(writer.Header(), http.StatusBadRequest)
		writer.WriteHeader(http.StatusBadRequest)
		_, _ = writer.Write([]byte("invalid request (004)"))
		return