Add default WAF filter for lightfuzz #2712
Conversation
📊 Performance Benchmark Report
📈 Detailed Results (All Benchmarks)
🎯 Performance Summary✅ No significant performance changes detected (all changes <10%) 🐍 Python Version 3.11.13 |
| # If we've disabled fuzzing POST parameters, back out of POSTPARAM WEB_PARAMETER events as quickly as possible | ||
| async def filter_event(self, event): | ||
| # Unless configured specifically to do so, avoid running against confirmed WAFs | ||
| if self.avoid_wafs and any(tag in ["cdn-cloudflare", "cdn-akamai", "cdn-incapsula"] for tag in event.tags): |
There was a problem hiding this comment.
If we need to track which cloud providers are WAFs, this should be done in cloudcheck
There was a problem hiding this comment.
is that possible now or do we want to hold for a cloudcheck feature?
There was a problem hiding this comment.
Cloudcheck is about to get rustified so now is a good time to add it
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## dev #2712 +/- ##
======================================
- Coverage 92% 92% -0%
======================================
Files 410 407 -3
Lines 33942 33826 -116
======================================
- Hits 31007 30865 -142
- Misses 2935 2961 +26 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
2 participants
No description provided.