Merge pull request #1452 from Bidaya0/fea/new-strategy-rules

feat: new strategy rules .
HXSecurity · May 16, 2023 · 3b5364f · 3b5364f
2 parents 61dc8a6 + 10dc35c
commit 3b5364f
Show file tree

Hide file tree

Showing 6 changed files with 37 additions and 57 deletions.
diff --git a/static/data/go_hooktype.json b/static/data/go_hooktype.json
@@ -428,17 +428,6 @@
         "type": 3,
         "value": "xxe-filter"
     },
-    {
-        "created_by": 1,
-        "enable": 1,
-        "language": 4,
-        "name": "\u6587\u4ef6\u5199\u5165",
-        "name_en": null,
-        "name_zh": "\u6587\u4ef6\u5199\u5165",
-        "system_type": 1,
-        "type": 4,
-        "value": "\u6587\u4ef6\u5199\u5165"
-    },
     {
         "created_by": 1,
         "enable": 1,

diff --git a/static/data/java_full_policy.json b/static/data/java_full_policy.json
@@ -3908,14 +3908,14 @@
                 "enable": 1,
                 "ignore_blacklist": false,
                 "ignore_internal": false,
-                "inherit": "true",
+                "inherit": "all",
                 "language": 1,
                 "source": "P1",
                 "stack_blacklist": [],
                 "system_type": 1,
                 "tags": [],
                 "target": "",
-                "track": "false",
+                "track": "true",
                 "type": 4,
                 "untags": [],
                 "value": "javax.servlet.http.Cookie.setSecure(boolean)"
@@ -6770,6 +6770,26 @@
                 "untags": [],
                 "value": "jakarta.servlet.http.HttpServletRequest.getHeaders(java.lang.String)"
             },
+            {
+                "command": "",
+                "created_by": 1,
+                "enable": 1,
+                "ignore_blacklist": false,
+                "ignore_internal": false,
+                "inherit": "true",
+                "language": 1,
+                "source": "P1",
+                "stack_blacklist": [],
+                "system_type": 1,
+                "tags": [
+                    "cross-site"
+                ],
+                "target": "R",
+                "track": "false",
+                "type": 2,
+                "untags": [],
+                "value": "jakarta.servlet.http.HttpServletRequest.getParameter(java.lang.String)"
+            },
             {
                 "command": "",
                 "created_by": 1,

diff --git a/static/data/java_hooktype.json b/static/data/java_hooktype.json
@@ -54,17 +54,6 @@
         "type": 1,
         "value": "Enumeration"
     },
-    {
-        "created_by": 1,
-        "enable": 1,
-        "language": 1,
-        "name": "\u6587\u4ef6\u5199\u5165",
-        "name_en": null,
-        "name_zh": "\u6587\u4ef6\u5199\u5165",
-        "system_type": 1,
-        "type": 4,
-        "value": "FileWrite"
-    },
     {
         "created_by": 1,
         "enable": 1,
@@ -1044,17 +1033,6 @@
         "type": 3,
         "value": "xxe-filter"
     },
-    {
-        "created_by": 1,
-        "enable": 1,
-        "language": 1,
-        "name": "\u6587\u4ef6\u5199\u5165",
-        "name_en": null,
-        "name_zh": "\u6587\u4ef6\u5199\u5165",
-        "system_type": 1,
-        "type": 4,
-        "value": "\u6587\u4ef6\u5199\u5165"
-    },
     {
         "created_by": 1,
         "enable": 1,

diff --git a/static/data/java_policy.json b/static/data/java_policy.json
@@ -4665,6 +4665,21 @@
                 "untags": [],
                 "value": "jakarta.servlet.http.HttpServletRequest.getHeaders(java.lang.String)"
             },
+            {
+                "command": "",
+                "ignore_blacklist": false,
+                "ignore_internal": false,
+                "inherit": "true",
+                "source": "P1",
+                "stack_blacklist": [],
+                "tags": [
+                    "cross-site"
+                ],
+                "target": "R",
+                "track": "false",
+                "untags": [],
+                "value": "jakarta.servlet.http.HttpServletRequest.getParameter(java.lang.String)"
+            },
             {
                 "command": "",
                 "ignore_blacklist": false,

diff --git a/static/data/php_hooktype.json b/static/data/php_hooktype.json
@@ -428,17 +428,6 @@
         "type": 3,
         "value": "xxe-filter"
     },
-    {
-        "created_by": 1,
-        "enable": 1,
-        "language": 3,
-        "name": "\u6587\u4ef6\u5199\u5165",
-        "name_en": null,
-        "name_zh": "\u6587\u4ef6\u5199\u5165",
-        "system_type": 1,
-        "type": 4,
-        "value": "\u6587\u4ef6\u5199\u5165"
-    },
     {
         "created_by": 1,
         "enable": 1,

diff --git a/static/data/python_hooktype.json b/static/data/python_hooktype.json
@@ -571,17 +571,6 @@
         "type": 3,
         "value": "xxe-filter"
     },
-    {
-        "created_by": 1,
-        "enable": 1,
-        "language": 2,
-        "name": "\u6587\u4ef6\u5199\u5165",
-        "name_en": null,
-        "name_zh": "\u6587\u4ef6\u5199\u5165",
-        "system_type": 1,
-        "type": 4,
-        "value": "\u6587\u4ef6\u5199\u5165"
-    },
     {
         "created_by": 1,
         "enable": 1,