Examples of com.denimgroup.threadfix.service.waf.RealTimeProtectionGenerator

com.denimgroup.threadfix.service.waf.RealTimeProtectionGenerator

This class facilitates adding support for new WAF types. To use, just subclass this class, write these three methods: generateRuleWithParameter - for a known location and parameter (lots of stuff) generateRuleForExactUrl - for a known URL (directory traversal, forced browsing) generateRuleWithPayloadInUrl - for cases where the payload isn't in a parameter and also the method getSupportedVulnerabilityTypes, so that you can control which vuln types get rules generated for them. You will also need to add some directives to the database and add the WAF type to RealTimeProtectionGeneratorFactory. @author bbeverly @author mcollins

      editedDirective = waf.getLastWafRuleDirective();
    }


    RealTimeProtectionGeneratorFactory factory = new RealTimeProtectionGeneratorFactory(
                              wafRuleDao, wafRuleDirectiveDao);
    RealTimeProtectionGenerator generator = factory.getTracker(waf.getWafType().getName());
    if (generator != null) {
      if (editedDirective == null) {
        editedDirective = generator.getDefaultDirective(waf);
      }


            newWafRuleList = generator.generateRules(waf, editedDirective, application);
            waf.addWafRules(newWafRuleList);
            waf.setLastWafRuleDirective(editedDirective);
      saveOrUpdateRules(waf, editedDirective);
      storeWaf(waf);
    }

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.

Examples of com.denimgroup.threadfix.service.waf.RealTimeProtectionGenerator

Related Classes of com.denimgroup.threadfix.service.waf.RealTimeProtectionGenerator