mirror of
https://github.com/Buriburizaem0n/nezha_domains.git
synced 2026-02-04 20:50:06 +00:00
6493911d45
* test(deps): use self admin-frontend * feat: separate real ip header of frontend/agent * test(ci): test * Revert "test(ci): test" This reverts commit 1634c7e7d7bca2873c13955abb582ea88645844f. * test(ci): test * test(ci): test * test(ci): test * Revert "test(ci): test" This reverts commit 8fce20a07e5a9503f665937337050d4373ca7e78. * Revert "test(ci): test" This reverts commit 3267cccbfb81776a711e8cb34e676536f0852d1c. * Revert "test(ci): test" This reverts commit 566660c0c6a9875864aa46537bcc6788769337eb. * Revert "test(deps): use self admin-frontend" This reverts commit 16a838b374ff040800b2c1c5f8e5ede577645669.
58 lines
1.3 KiB
Go
58 lines
1.3 KiB
Go
package waf
|
|
|
|
import (
|
|
_ "embed"
|
|
"net/http"
|
|
"strings"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
|
|
"github.com/nezhahq/nezha/model"
|
|
"github.com/nezhahq/nezha/pkg/utils"
|
|
"github.com/nezhahq/nezha/service/singleton"
|
|
)
|
|
|
|
//go:embed waf.html
|
|
var errorPageTemplate string
|
|
|
|
func RealIp(c *gin.Context) {
|
|
if singleton.Conf.WebRealIPHeader == "" {
|
|
c.Next()
|
|
return
|
|
}
|
|
|
|
if singleton.Conf.WebRealIPHeader == model.ConfigUsePeerIP {
|
|
c.Set(model.CtxKeyRealIPStr, c.RemoteIP())
|
|
c.Next()
|
|
return
|
|
}
|
|
|
|
vals := c.Request.Header.Get(singleton.Conf.WebRealIPHeader)
|
|
if vals == "" {
|
|
c.AbortWithStatusJSON(http.StatusOK, model.CommonResponse[any]{Success: false, Error: "real ip header not found"})
|
|
return
|
|
}
|
|
ip, err := utils.GetIPFromHeader(vals)
|
|
if err != nil {
|
|
c.AbortWithStatusJSON(http.StatusOK, model.CommonResponse[any]{Success: false, Error: err.Error()})
|
|
return
|
|
}
|
|
c.Set(model.CtxKeyRealIPStr, ip)
|
|
c.Next()
|
|
}
|
|
|
|
func Waf(c *gin.Context) {
|
|
if err := model.CheckIP(singleton.DB, c.GetString(model.CtxKeyRealIPStr)); err != nil {
|
|
ShowBlockPage(c, err)
|
|
return
|
|
}
|
|
c.Next()
|
|
}
|
|
|
|
func ShowBlockPage(c *gin.Context, err error) {
|
|
c.Writer.WriteHeader(http.StatusForbidden)
|
|
c.Header("Content-Type", "text/html; charset=utf-8")
|
|
c.Writer.WriteString(strings.Replace(errorPageTemplate, "{error}", err.Error(), 1))
|
|
c.Abort()
|
|
}
|