corazawaf/coraza

failed to compile the directive "secrule": invalid action "proxy"

Open

#775 opened on Apr 12, 2023

View on GitHubContributor guide
 (10 comments) (0 reactions) (0 assignees)Go (333 forks)auto 404
documentationgood first issue

Repository metrics

Stars
 (3,627 stars)
PR merge metrics
 (PR metrics pending)

Description

Description

WAF config from string reports:

invalid WAF config from string: failed to compile the directive "secrule": invalid action "proxy"

Running 3.0.0-rc1.

Steps to reproduce

https://coraza.io/docs/seclang/actions/#proxy

The rules for block and redirect are parsed and enforced correctly. Proxy is unrecognized.

Expected result

I should get a filled out types.Interruption with Action: proxy and Data: url;

Actual result

The above error.

Contributor guide

Research direction
Find where seclang directives are parsed and actions validated (likely in the rule engine). Look for a map or switch that handles actions like 'block' and 'redirect', and add support for the 'proxy' action with its expected behavior (sets Interruption with Action: proxy and Data: url).
Tech stack
go
Domain
backendsecurity
Issue type
Bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
Go
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60