1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
|
-- Licensed to the Apache Software Foundation (ASF) under one
-- or more contributor license agreements. See the NOTICE file
-- distributed with this work for additional information
-- regarding copyright ownership. The ASF licenses this file
-- to you under the Apache License, Version 2.0 (the
-- "License"); you may not use this file except in compliance
-- with the License. You may obtain a copy of the License at
--
-- http://www.apache.org/licenses/LICENSE-2.0
--
-- Unless required by applicable law or agreed to in writing, software
-- distributed under the License is distributed on an "AS IS" BASIS,
-- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-- See the License for the specific language governing permissions and
-- limitations under the License.
-- module containing modsecurity to be used
local ffi = require("ffi")
ffi.cdef[[
typedef struct ModSecurity ModSecurity;
ModSecurity* msc_init();
void msc_set_connector_info(ModSecurity *msc, const char *connector);
void msc_cleanup(ModSecurity *msc);
typedef struct Rules Rules;
Rules* msc_create_rules_set();
int msc_rules_add_file(Rules *rules, const char *file, const char **error);
int msc_rules_cleanup(Rules *rules);
typedef struct Transaction Transaction;
Transaction *msc_new_transaction(ModSecurity *ms, Rules *rules, void *logCbData);
int msc_process_connection(Transaction *transaction, const char *client, int cPort, const char *server, int sPort);
int msc_process_uri(Transaction *transaction, const char *uri, const char *protocol, const char *http_version);
int msc_add_request_header(Transaction *transaction, const unsigned char *key, const unsigned char *value);
int msc_process_request_headers(Transaction *transaction);
int msc_process_request_body(Transaction *transaction);
int msc_add_response_header(Transaction *transaction, const unsigned char *key, const unsigned char *value);
int msc_process_response_headers(Transaction *transaction, int code, const char* protocol);
int msc_process_response_body(Transaction *transaction);
int msc_process_logging(Transaction *transaction);
void msc_transaction_cleanup(Transaction *transaction);
typedef struct ModSecurityIntervention_t {
int status;
int pause;
char *url;
char *log;
int disruptive;
} ModSecurityIntervention;
int msc_intervention(Transaction *transaction, ModSecurityIntervention *it);
]]
local msc = ffi.load("/usr/local/modsecurity/lib/libmodsecurity.so")
return msc
|
