mirror of
https://github.com/crowdsecurity/crowdsec.git
synced 2025-05-11 04:15:54 +02:00
89aec7cf6b
* pkg/cwhub: simpler accessor methods - prefer higher level GetItemsByType, GetInstalledByType over GetItemMap - always send both appsec-rules and scenarios to api - explicit parameter for (case insensitive) sorted list of items - shorter code - assume itemType parameter makes sense, don't error * lint (gofumpt)
46 lines
1.1 KiB
Go
46 lines
1.1 KiB
Go
package cwhub
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
"path/filepath"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/crowdsecurity/crowdsec/pkg/cwversion"
|
|
)
|
|
|
|
// hubTransport wraps a Transport to set a custom User-Agent.
|
|
type hubTransport struct {
|
|
http.RoundTripper
|
|
}
|
|
|
|
func (t *hubTransport) RoundTrip(req *http.Request) (*http.Response, error) {
|
|
req.Header.Set("User-Agent", cwversion.UserAgent())
|
|
return t.RoundTripper.RoundTrip(req)
|
|
}
|
|
|
|
// hubClient is the HTTP client used to communicate with the CrowdSec Hub.
|
|
var hubClient = &http.Client{
|
|
Timeout: 120 * time.Second,
|
|
Transport: &hubTransport{http.DefaultTransport},
|
|
}
|
|
|
|
// safePath returns a joined path and ensures that it does not escape the base directory.
|
|
func safePath(dir, filePath string) (string, error) {
|
|
absBaseDir, err := filepath.Abs(filepath.Clean(dir))
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
absFilePath, err := filepath.Abs(filepath.Join(dir, filePath))
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
if !strings.HasPrefix(absFilePath, absBaseDir) {
|
|
return "", fmt.Errorf("path %s escapes base directory %s", filePath, dir)
|
|
}
|
|
|
|
return absFilePath, nil
|
|
}
|