jptosso / coraza-libinjection

Hi!, I'm Juan Pablo Tosso, founder of the Coraza Web Application Firewall project.

My interests are Web application Firewalls ❤️ and containers.

I'm working as a Cybersecurity Research Engineer @ Traceable AI.

coraza-libinjection's Issues

Error while importing plugin

Hello,
First of all, thank you for you Coraza WAF, I am trying to build a bouncer for traefik using it.
I am having a rules compile error:

Failed to compile rule (operator detectXSS not found): REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|REQUEST_HEADERS:User-Agent|ARGS_NAMES|ARGS|XML:/* \"@detectXSS\" \"id:941100,phase:2,block,t:none,t:utf8toUnicode,t:urlDecodeUni,t:htmlEntityDecode,t:jsDecode,t:cssDecode,t:removeNulls,msg:'XSS Attack Detected via libinjection',logdata:'Matched Data: XSS data found within %{MATCHED_VAR_NAME}: %{MATCHED_VAR}',tag:'application-multi',tag:'language-multi',tag:'platform-multi',tag:'attack-xss',tag:'paranoia-level/1',tag:'OWASP_CRS',tag:'capec/1000/152/242',ctl:auditLogParts=+E,ver:'OWASP_CRS/3.3.2',severity:'CRITICAL',setvar:'tx.xss_score=+%{tx.critical_anomaly_score}',setvar:'tx.anomaly_score_pl1=+%{tx.critical_anomaly_score}'\""

So I check more in details your tutorial https://coraza.io/docs/tutorials/using-plugins/ and see that I forget a plugin. Through trying to import the plugin coraza-libinjection plugin result in this error:

# github.com/jptosso/coraza-libinjection
../../go/pkg/mod/github.com/jptosso/[email protected]/libinjection.go:22:10: fatal error: libinjection.h: No such file or directory
   22 | #include "libinjection.h"
      |          ^~~~~~~~~~~~~~~~
compilation terminated.

Can you help me with this issue?

To try to isolate the problem, my steps to reproduce:

$ go version
go version go1.17.1 linux/amd64
$ cat main.go 
package main

import (
	_ "github.com/jptosso/coraza-libinjection"
)

func main() {
}	
$ go mod init test
go: creating new go.mod: module test
go: to add module requirements and sums:
	go mod tidy
$ go mod tidy
go: finding module for package github.com/jptosso/coraza-libinjection
go: found github.com/jptosso/coraza-libinjection in github.com/jptosso/coraza-libinjection v0.0.0-20211223231304-7153f68c6821
go: downloading github.com/jptosso/coraza-waf/v2 v2.0.0-beta.2.0.20211201203316-49869b6ff2ea
$ go build -o app
# github.com/jptosso/coraza-libinjection
/home/fbonalair/go/pkg/mod/github.com/jptosso/[email protected]/libinjection.go:22:10: fatal error: libinjection.h: No such file or directory
   22 | #include "libinjection.h"
      |          ^~~~~~~~~~~~~~~~
compilation terminated.

Am I missing something?