completely remove native
This commit is contained in:
Tobe O
parent
d59b2b331a
commit
1ab8a7fceb
12 changed files with 0 additions and 280 deletions
121
.clang-format
121
.clang-format
|
|
@ -1,121 +0,0 @@
|
||||||
---
|
|
||||||
Language: Cpp
|
|
||||||
# BasedOnStyle: LLVM
|
|
||||||
AccessModifierOffset: -2
|
|
||||||
AlignAfterOpenBracket: Align
|
|
||||||
AlignConsecutiveAssignments: false
|
|
||||||
AlignConsecutiveDeclarations: false
|
|
||||||
AlignEscapedNewlines: Right
|
|
||||||
AlignOperands: true
|
|
||||||
AlignTrailingComments: true
|
|
||||||
AllowAllParametersOfDeclarationOnNextLine: true
|
|
||||||
AllowShortBlocksOnASingleLine: false
|
|
||||||
AllowShortCaseLabelsOnASingleLine: false
|
|
||||||
AllowShortFunctionsOnASingleLine: All
|
|
||||||
AllowShortIfStatementsOnASingleLine: false
|
|
||||||
AllowShortLoopsOnASingleLine: false
|
|
||||||
AlwaysBreakAfterDefinitionReturnType: None
|
|
||||||
AlwaysBreakAfterReturnType: None
|
|
||||||
AlwaysBreakBeforeMultilineStrings: false
|
|
||||||
AlwaysBreakTemplateDeclarations: MultiLine
|
|
||||||
BinPackArguments: true
|
|
||||||
BinPackParameters: true
|
|
||||||
BraceWrapping:
|
|
||||||
AfterClass: false
|
|
||||||
AfterControlStatement: false
|
|
||||||
AfterEnum: false
|
|
||||||
AfterFunction: false
|
|
||||||
AfterNamespace: false
|
|
||||||
AfterObjCDeclaration: false
|
|
||||||
AfterStruct: false
|
|
||||||
AfterUnion: false
|
|
||||||
AfterExternBlock: false
|
|
||||||
BeforeCatch: false
|
|
||||||
BeforeElse: false
|
|
||||||
IndentBraces: false
|
|
||||||
SplitEmptyFunction: true
|
|
||||||
SplitEmptyRecord: true
|
|
||||||
SplitEmptyNamespace: true
|
|
||||||
BreakBeforeBinaryOperators: None
|
|
||||||
BreakBeforeBraces: Attach
|
|
||||||
BreakBeforeInheritanceComma: false
|
|
||||||
BreakInheritanceList: BeforeColon
|
|
||||||
BreakBeforeTernaryOperators: true
|
|
||||||
BreakConstructorInitializersBeforeComma: false
|
|
||||||
BreakConstructorInitializers: BeforeColon
|
|
||||||
BreakAfterJavaFieldAnnotations: false
|
|
||||||
BreakStringLiterals: true
|
|
||||||
ColumnLimit: 80
|
|
||||||
CommentPragmas: '^ IWYU pragma:'
|
|
||||||
CompactNamespaces: false
|
|
||||||
ConstructorInitializerAllOnOneLineOrOnePerLine: false
|
|
||||||
ConstructorInitializerIndentWidth: 4
|
|
||||||
ContinuationIndentWidth: 4
|
|
||||||
Cpp11BracedListStyle: true
|
|
||||||
DerivePointerAlignment: false
|
|
||||||
DisableFormat: false
|
|
||||||
ExperimentalAutoDetectBinPacking: false
|
|
||||||
FixNamespaceComments: true
|
|
||||||
ForEachMacros:
|
|
||||||
- foreach
|
|
||||||
- Q_FOREACH
|
|
||||||
- BOOST_FOREACH
|
|
||||||
IncludeBlocks: Preserve
|
|
||||||
IncludeCategories:
|
|
||||||
- Regex: '^"(llvm|llvm-c|clang|clang-c)/'
|
|
||||||
Priority: 2
|
|
||||||
- Regex: '^(<|"(gtest|gmock|isl|json)/)'
|
|
||||||
Priority: 3
|
|
||||||
- Regex: '.*'
|
|
||||||
Priority: 1
|
|
||||||
IncludeIsMainRegex: '(Test)?$'
|
|
||||||
IndentCaseLabels: false
|
|
||||||
IndentPPDirectives: None
|
|
||||||
IndentWidth: 2
|
|
||||||
IndentWrappedFunctionNames: false
|
|
||||||
JavaScriptQuotes: Leave
|
|
||||||
JavaScriptWrapImports: true
|
|
||||||
KeepEmptyLinesAtTheStartOfBlocks: true
|
|
||||||
MacroBlockBegin: ''
|
|
||||||
MacroBlockEnd: ''
|
|
||||||
MaxEmptyLinesToKeep: 1
|
|
||||||
NamespaceIndentation: None
|
|
||||||
ObjCBinPackProtocolList: Auto
|
|
||||||
ObjCBlockIndentWidth: 2
|
|
||||||
ObjCSpaceAfterProperty: false
|
|
||||||
ObjCSpaceBeforeProtocolList: true
|
|
||||||
PenaltyBreakAssignment: 2
|
|
||||||
PenaltyBreakBeforeFirstCallParameter: 19
|
|
||||||
PenaltyBreakComment: 300
|
|
||||||
PenaltyBreakFirstLessLess: 120
|
|
||||||
PenaltyBreakString: 1000
|
|
||||||
PenaltyBreakTemplateDeclaration: 10
|
|
||||||
PenaltyExcessCharacter: 1000000
|
|
||||||
PenaltyReturnTypeOnItsOwnLine: 60
|
|
||||||
PointerAlignment: Right
|
|
||||||
ReflowComments: true
|
|
||||||
SortIncludes: true
|
|
||||||
SortUsingDeclarations: true
|
|
||||||
SpaceAfterCStyleCast: false
|
|
||||||
SpaceAfterTemplateKeyword: true
|
|
||||||
SpaceBeforeAssignmentOperators: true
|
|
||||||
SpaceBeforeCpp11BracedList: false
|
|
||||||
SpaceBeforeCtorInitializerColon: true
|
|
||||||
SpaceBeforeInheritanceColon: true
|
|
||||||
SpaceBeforeParens: ControlStatements
|
|
||||||
SpaceBeforeRangeBasedForLoopColon: true
|
|
||||||
SpaceInEmptyParentheses: false
|
|
||||||
SpacesBeforeTrailingComments: 1
|
|
||||||
SpacesInAngles: false
|
|
||||||
SpacesInContainerLiterals: true
|
|
||||||
SpacesInCStyleCastParentheses: false
|
|
||||||
SpacesInParentheses: false
|
|
||||||
SpacesInSquareBrackets: false
|
|
||||||
Standard: Cpp11
|
|
||||||
StatementMacros:
|
|
||||||
- Q_UNUSED
|
|
||||||
- QT_REQUIRE_VERSION
|
|
||||||
TabWidth: 8
|
|
||||||
UseTab: Never
|
|
||||||
...
|
|
||||||
|
|
||||||
0
.gitmodules
vendored
0
.gitmodules
vendored
|
|
@ -1,12 +0,0 @@
|
||||||
cmake_minimum_required(VERSION 3.0)
|
|
||||||
project(angel_security)
|
|
||||||
set(CMAKE_EXPORT_COMPILE_COMMANDS ON)
|
|
||||||
list(APPEND CMAKE_MODULE_PATH "${CMAKE_CURRENT_LIST_DIR}/cmake_dart_utils/cmake")
|
|
||||||
find_package(Dart REQUIRED)
|
|
||||||
include_directories(libinjection/src)
|
|
||||||
add_subdirectory(libinjection/src)
|
|
||||||
add_dart_native_extension(angel_security_native lib/src/native/angel_security.c)
|
|
||||||
target_link_libraries(angel_security_native injection)
|
|
||||||
install(TARGETS angel_security_native injection
|
|
||||||
ARCHIVE DESTINATION "${CMAKE_CURRENT_LIST_DIR}/lib/src/native"
|
|
||||||
LIBRARY DESTINATION "${CMAKE_CURRENT_LIST_DIR}/lib/src/native")
|
|
||||||
|
|
@ -1,29 +0,0 @@
|
||||||
import 'package:angel_framework/angel_framework.dart';
|
|
||||||
import 'package:angel_framework/http.dart';
|
|
||||||
import 'package:angel_security/native.dart';
|
|
||||||
import 'package:logging/logging.dart';
|
|
||||||
import 'package:pretty_logging/pretty_logging.dart';
|
|
||||||
|
|
||||||
main() async {
|
|
||||||
// Logging boilerplate.
|
|
||||||
Logger.root.onRecord.listen(prettyLog);
|
|
||||||
|
|
||||||
// Create an app, and HTTP driver.
|
|
||||||
var app = Angel(logger: Logger('rate_limit')), http = AngelHttp(app);
|
|
||||||
|
|
||||||
// Filter out SQL injections from the query. On every GET request,
|
|
||||||
// print out the query parameters (as JSON).
|
|
||||||
app
|
|
||||||
..fallback(sqliFilterQuery)
|
|
||||||
..get('/', (req, res) => req.queryParameters)
|
|
||||||
..fallback((req, res) => throw AngelHttpException.notFound());
|
|
||||||
|
|
||||||
// Start the server.
|
|
||||||
await http.startServer('127.0.0.1', 3000);
|
|
||||||
print('SQLi filtering example listening at ${http.uri}');
|
|
||||||
|
|
||||||
var exampleUri = http.uri.replace(queryParameters: {
|
|
||||||
'id': "-1' and 1=1 union/* foo */select load_file('/etc/passwd')--"
|
|
||||||
});
|
|
||||||
print('Example URI: $exampleUri');
|
|
||||||
}
|
|
||||||
|
|
@ -1 +0,0 @@
|
||||||
export 'src/native/native.dart';
|
|
||||||
|
|
@ -1,61 +0,0 @@
|
||||||
#include <dart_api.h>
|
|
||||||
#include <libinjection.h>
|
|
||||||
#include <libinjection_sqli.h>
|
|
||||||
#include <stdbool.h>
|
|
||||||
#include <string.h>
|
|
||||||
|
|
||||||
Dart_NativeFunction ResolveName(Dart_Handle name, int argc,
|
|
||||||
bool *auto_setup_scope);
|
|
||||||
|
|
||||||
DART_EXPORT Dart_Handle angel_security_native_Init(Dart_Handle parent_library) {
|
|
||||||
if (Dart_IsError(parent_library))
|
|
||||||
return parent_library;
|
|
||||||
|
|
||||||
Dart_Handle result_code =
|
|
||||||
Dart_SetNativeResolver(parent_library, ResolveName, NULL);
|
|
||||||
if (Dart_IsError(result_code))
|
|
||||||
return result_code;
|
|
||||||
|
|
||||||
return Dart_Null();
|
|
||||||
}
|
|
||||||
|
|
||||||
Dart_Handle HandleError(Dart_Handle handle) {
|
|
||||||
if (Dart_IsError(handle))
|
|
||||||
Dart_PropagateError(handle);
|
|
||||||
return handle;
|
|
||||||
}
|
|
||||||
|
|
||||||
void Angel_Security_IsSqli(Dart_NativeArguments arguments) {
|
|
||||||
const char *text;
|
|
||||||
Dart_Handle textHandle = Dart_GetNativeArgument(arguments, 0);
|
|
||||||
HandleError(Dart_StringToCString(textHandle, &text));
|
|
||||||
|
|
||||||
struct libinjection_sqli_state state;
|
|
||||||
libinjection_sqli_init(&state, text, strlen(text), FLAG_NONE);
|
|
||||||
int is_sqli = libinjection_is_sqli(&state);
|
|
||||||
|
|
||||||
// Return list
|
|
||||||
Dart_Handle outHandle = Dart_NewList(2);
|
|
||||||
if (is_sqli != 0) {
|
|
||||||
HandleError(Dart_ListSetAt(outHandle, 0, Dart_NewBoolean(true)));
|
|
||||||
HandleError(Dart_ListSetAt(outHandle, 1,
|
|
||||||
Dart_NewStringFromCString(state.fingerprint)));
|
|
||||||
} else {
|
|
||||||
HandleError(Dart_ListSetAt(outHandle, 0, Dart_NewBoolean(false)));
|
|
||||||
HandleError(Dart_ListSetAt(outHandle, 1, Dart_Null()));
|
|
||||||
}
|
|
||||||
Dart_SetReturnValue(arguments, outHandle);
|
|
||||||
}
|
|
||||||
|
|
||||||
Dart_NativeFunction ResolveName(Dart_Handle name, int argc,
|
|
||||||
bool *auto_setup_scope) {
|
|
||||||
if (!Dart_IsString(name))
|
|
||||||
return NULL;
|
|
||||||
Dart_NativeFunction result = NULL;
|
|
||||||
const char *cname;
|
|
||||||
HandleError(Dart_StringToCString(name, &cname));
|
|
||||||
|
|
||||||
if (strcmp("Angel_Security_IsSqli", cname) == 0)
|
|
||||||
result = Angel_Security_IsSqli;
|
|
||||||
return result;
|
|
||||||
}
|
|
||||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
|
|
@ -1,3 +0,0 @@
|
||||||
import 'dart-ext:angel_security_native';
|
|
||||||
import 'package:angel_framework/angel_framework.dart';
|
|
||||||
part 'sqli.dart';
|
|
||||||
|
|
@ -1,39 +0,0 @@
|
||||||
part of 'native.dart';
|
|
||||||
|
|
||||||
List _isSqli(String text) native "Angel_Security_IsSqli";
|
|
||||||
|
|
||||||
/// Using `libinjection`, determines whether a string contains
|
|
||||||
/// a SQL injection.
|
|
||||||
LibInjectionScore sqlInjectionScore(String text) {
|
|
||||||
var result = _isSqli(text);
|
|
||||||
return LibInjectionScore(result[0] as bool, result[1] as String);
|
|
||||||
}
|
|
||||||
|
|
||||||
/// Uses `libinjection` to filter out possible SQL injections from the
|
|
||||||
/// query parameters ([RequestContext.queryParameters]).
|
|
||||||
///
|
|
||||||
/// Note: This is *destructive*, and modifies the query parameter map,
|
|
||||||
/// instead of returning new data.
|
|
||||||
bool sqliFilterQuery(RequestContext req, ResponseContext res) {
|
|
||||||
var out = <String, dynamic>{};
|
|
||||||
req.queryParameters.forEach((k, v) {
|
|
||||||
if (v is! String) {
|
|
||||||
out[k] = v;
|
|
||||||
} else {
|
|
||||||
var score = sqlInjectionScore(v as String);
|
|
||||||
if (!score.isInjection) {
|
|
||||||
out[k] = v;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
});
|
|
||||||
|
|
||||||
req.queryParameters..clear()..addAll(out);
|
|
||||||
return true;
|
|
||||||
}
|
|
||||||
|
|
||||||
class LibInjectionScore {
|
|
||||||
final bool isInjection;
|
|
||||||
final String signature;
|
|
||||||
|
|
||||||
LibInjectionScore(this.isInjection, [this.signature]);
|
|
||||||
}
|
|
||||||
14
security.iml
14
security.iml
|
|
@ -1,14 +0,0 @@
|
||||||
<?xml version="1.0" encoding="UTF-8"?>
|
|
||||||
<module type="WEB_MODULE" version="4">
|
|
||||||
<component name="NewModuleRootManager" inherit-compiler-output="true">
|
|
||||||
<exclude-output />
|
|
||||||
<content url="file://$MODULE_DIR$">
|
|
||||||
<excludeFolder url="file://$MODULE_DIR$/.pub" />
|
|
||||||
<excludeFolder url="file://$MODULE_DIR$/build" />
|
|
||||||
</content>
|
|
||||||
<orderEntry type="inheritedJdk" />
|
|
||||||
<orderEntry type="sourceFolder" forTests="false" />
|
|
||||||
<orderEntry type="library" name="Dart SDK" level="project" />
|
|
||||||
<orderEntry type="library" name="Dart Packages" level="project" />
|
|
||||||
</component>
|
|
||||||
</module>
|
|
||||||
Loading…
Reference in a new issue