search

nbs-system / naxsi

NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
GNU General Public License v3.0
4.8k stars 606 forks source link

What does the ALLOW action do? #368

Closed Annihil closed 7 years ago

Annihil commented 7 years ago

I did not found any documentation regarding actions of the CheckRules. If I understand correctly, DROP will block the request no matter the learning mode state, while BLOCK will block the request only if not in learning mode. LOG will just write learning log without blocking the request. What will LOG do if learning mode is disabled? Moreover, I checked the code, ctx->allow is set but never used (no if (ctx->allow)). What is the purpose of ALLOW ?

Thanks.

buixor commented 7 years ago

Hello,

allow score aims at overriding other rules to force a pass action, but it should not be used for now, as it is not fully implemented.

buixor commented 7 years ago

see #374 :)