zentinel-modsec 0.1.2

Pure Rust ModSecurity implementation with full OWASP CRS compatibility
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

//! Disruptive actions (deny, block, pass, allow, redirect).

use super::DisruptiveOutcome;

/// Determine the final HTTP status code for a disruptive action.
pub fn status_for_outcome(outcome: &DisruptiveOutcome, default_status: u16) -> u16 {
    match outcome {
        DisruptiveOutcome::Deny(status) => *status,
        DisruptiveOutcome::Block => default_status,
        DisruptiveOutcome::Allow => 200,
        DisruptiveOutcome::Redirect(_) => 302,
        DisruptiveOutcome::Pass => 200,
        DisruptiveOutcome::Drop => 444, // nginx-style connection drop
    }
}

/// Check if the outcome should terminate the request.
pub fn is_terminal(outcome: &DisruptiveOutcome) -> bool {
    matches!(
        outcome,
        DisruptiveOutcome::Deny(_)
            | DisruptiveOutcome::Block
            | DisruptiveOutcome::Drop
            | DisruptiveOutcome::Redirect(_)
    )
}

/// Check if the outcome is an allow (should skip further rules).
pub fn is_allow(outcome: &DisruptiveOutcome) -> bool {
    matches!(outcome, DisruptiveOutcome::Allow)
}