-
-
Notifications
You must be signed in to change notification settings - Fork 742
Add default WAF filter for lightfuzz #2712
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: dev
Are you sure you want to change the base?
Conversation
📊 Performance Benchmark Report
📈 Detailed Results (All Benchmarks)
🎯 Performance Summary✅ No significant performance changes detected (all changes <10%) 🐍 Python Version 3.11.13 |
# If we've disabled fuzzing POST parameters, back out of POSTPARAM WEB_PARAMETER events as quickly as possible | ||
async def filter_event(self, event): | ||
# Unless configured specifically to do so, avoid running against confirmed WAFs | ||
if self.avoid_wafs and any(tag in ["cdn-cloudflare", "cdn-akamai", "cdn-incapsula"] for tag in event.tags): |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If we need to track which cloud providers are WAFs, this should be done in cloudcheck
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
is that possible now or do we want to hold for a cloudcheck feature?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Cloudcheck is about to get rustified so now is a good time to add it
Codecov Report❌ Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## dev #2712 +/- ##
=====================================
- Coverage 92% 92% -0%
=====================================
Files 410 411 +1
Lines 33942 33955 +13
=====================================
- Hits 31007 30966 -41
- Misses 2935 2989 +54 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
No description provided.