1
0
Fork 0

feat: Add App rule

This commit is contained in:
zhengkunwang223 2025-02-12 10:40:02 +08:00 committed by CityFun
parent 0a58719eca
commit 0c03af1391
9 changed files with 100 additions and 123 deletions

View File

@ -161,6 +161,7 @@
"action": "deny"
},
"log": {
"state": "on",
"maxDay": 180,
"maxSize": 1,
"external": ["acl","ipWhite","ipBlack","geoRestrict","urlWhite","urlBlack","uaWhite","uaBlack"]

View File

@ -81,9 +81,15 @@
"state": "off"
},
"strict": {
"state": "on",
"state": "off",
"type": "strict",
"code": 403,
"action": "deny"
},
"app": {
"state": "off",
"type": "app",
"action": "allow",
"rule": ""
}
}

View File

@ -0,0 +1,27 @@
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Welcome</title>
<style>
body {
margin: 0;
padding: 0;
font-family: Arial, sans-serif;
display: flex;
justify-content: center;
align-items: center;
height: 100vh;
background-color: #f3f4f6;
color: #333;
}
h1 {
font-size: 3rem;
}
</style>
</head>
<body>
<h1>Welcome to 1Panel</h1>
</body>
</html>

View File

@ -9,7 +9,8 @@
"/apis/api.console.halo.run/v1alpha1/posts",
"/api/v1alpha1/configmaps/system",
"/apis/api.console.halo.run/v1alpha1/singlepage",
"/apis/api.console.halo.run/v1alpha1/attachments/upload"
"/apis/api.console.halo.run/v1alpha1/attachments/upload",
"/apis/api.console.halo.run/v1alpha1/attachments"
],
"check": {
"type": "cookie",

View File

@ -0,0 +1,16 @@
{
"name":"MaxKB",
"state": "on",
"rules": [
{
"type": "whiteUrl",
"pattern": "startWith",
"values": [
"/api/application/chat_message",
"/api/function_lib",
"/function_lib/pylint",
"/api/dataset"
]
}
]
}

View File

@ -0,0 +1,27 @@
{
"name":"SiYuan",
"state": "on",
"rules": [
{
"type": "whiteUrl",
"pattern": "contain",
"method": "POST",
"values": [
"/api/transactions"
],
"check": {
"type": "cookie",
"pattern": "eq",
"values": ["siyuan"]
}
},
{
"type": "whiteUrl",
"pattern": "contain",
"method": "POST",
"values": [
"/api/notebook/lsNotebooks"
]
}
]
}

View File

@ -0,0 +1,20 @@
{
"name":"Typecho",
"state": "on",
"rules": [
{
"type": "whiteUrl",
"pattern": "startWith",
"values": [
"/index.php/action/contents-post-edit",
"/index.php/action/contents-page-edit",
"/index.php/action/users-profile"
],
"check": {
"type": "cookie",
"pattern": "eq",
"values": ["PHPSESSID"]
}
}
]
}

View File

@ -1,121 +0,0 @@
{
"rules": [
{
"state": "on",
"name": "sqlInject1",
"rule": "select.+(from|limit)",
"type": "sqlInject"
},
{
"state": "on",
"name": "sqlInject2",
"rule": "(?:(union(.*?)select))",
"type": "sqlInject"
},
{
"state": "on",
"name": "sqlInject3",
"rule": "having|rongjitest",
"type": "sqlInject"
},
{
"state": "on",
"name": "sqlInject4",
"rule": "sleep\\((\\s*)(\\d*)(\\s*)\\)",
"type": "sqlInject"
},
{
"state": "on",
"name": "sqlInject5",
"rule": "benchmark\\((.*)\\,(.*)\\)",
"type": "sqlInject"
},
{
"state": "on",
"name": "sqlInject6",
"rule": "group\\s+by.+\\(",
"type": "sqlInject"
},
{
"state": "on",
"name": "sqlInject7",
"rule": "(?:from\\W+information_schema\\W)",
"type": "sqlInject"
},
{
"state": "on",
"name": "sqlInject8",
"rule": "(?:(?:current_)user|database|schema|connection_id)\\s*\\(",
"type": "sqlInject"
},
{
"state": "on",
"name": "sqlInject9",
"rule": "into(\\s+)+(?:dump|out)file\\s*",
"type": "sqlInject"
},
{
"state": "on",
"name": "args1",
"rule": "xwork.MethodAccessor",
"type": "args",
"description": "Struts 恶意参数过滤"
},
{
"state": "on",
"name": "args2",
"rule": "xwork\\.MethodAccessor",
"type": "args",
"description": "Struts 恶意参数过滤"
},
{
"state": "on",
"name": "oneWordTrojan1",
"rule": "(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\(",
"type": "oneWordTrojan"
},
{
"state": "on",
"name": "protocolFilter1",
"rule": "(gopher|doc|php|glob|file|phar|zlib|ftp|ldap|dict|ogg|data)\\:\\/",
"type": "protocolFilter",
"description": "协议过滤"
},
{
"state": "on",
"name": "oneWordTrojan2",
"rule": "\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[",
"type": "oneWordTrojan"
},
{
"state": "on",
"name": "xss1",
"rule": "\\<(iframe|script|body|img|layer|div|meta|style|base|object|input)",
"type": "xss"
},
{
"state": "on",
"name": "xss2",
"rule": "(onmouseover|onerror|onload)\\=",
"type": "xss"
},
{
"state": "on",
"name": "xss3",
"rule": "base64_decode\\(",
"type": "xss"
},
{
"state": "on",
"name": "dirFilter1",
"rule": "(?:etc\\/\\W*passwd)",
"type": "dirFilter"
},
{
"state": "on",
"name": "dirFilter2",
"rule": "java\\.lang",
"type": "dirFilter"
}
]
}