jddlmZ ddlZddlZddlmZddlmZddlm Z ddl m Z m Z ej dZgdZGd d eZdd lmZmZddlZGd d eZddl mZGddeZdS)) annotationsN)unquote)BaseHTTPMiddleware)Request) JSONResponseResponsezdscons.security.waf))zk(?i)(union\s+select|select\s+.*\s+from\s+pg_|insert\s+into\s+.*values|drop\s+table|delete\s+from\s+.*where) SQL_INJECTION)z.(?i)('\s*or\s*'1'\s*=\s*'1|--\s*$|;\s*drop\s+)SQL_BYPASS_INJECTION)zF(?i)(]*>|javascript:|onerror\s*=|onload\s*=|alert\(|HGN''yK$  $ #")&?$EvA$E$E$E "$-9W#5#5555555/;*+5>12/>+,.O*+ : -.AG<= : 45 " 23 ;  & &v . . 4'+2B2M2M 3 3  4A  _ -*4H X &N)rrrr__name__ __module__ __qualname____doc__r5r6r4rr"s.\\;;;;;;r6r) defaultdictdequec.eZdZdZd d fd Zd d ZxZS) SimpleGlobalRateLimitMiddlewarezGGlobal Rate Limiter (Sliding Window Memory) to prevent DDoS/Bruteforce.< max_requestsintwindow_secondsct|||_||_t t |_dS)N)super__init__rBrDr=r> ip_records)r-apprBrD __class__s r4rGz(SimpleGlobalRateLimitMiddleware.__init__gs> (,%e,,r6rrc K|jjds|jjdr||d{VS|jr |jjnd}t j}|j|}|r>|d||jz kr*||r|d||jz k*t||j krLt d|d|j d|jdtd d d d |jd dS||||d{VS)Nz/staticz/storagerrz[RATE LIMIT] Blocked IP z - Exceeded z req / sirTOO_MANY_REQUESTSu?Hệ thống đang chịu tải cao. Vui lòng thử lại sau u giây.rr)r"r*r,r(r)timerHrDpopleftlenrBr&r'rappend)r-rr.ipnowhistorys r4r5z(SimpleGlobalRateLimitMiddleware.dispatchms ;  & &y 1 1 ,W[5E5P5PQ[5\5\ ,"7++++++++ +$+N AW^ ikk/"% '!*sT-@'@@@ OO    '!*sT-@'@@@ w<<4, , , NNvbvvdFWvv`d`svvv w w w%"5}aeat}}}  sYw'''''''''r6)rArA)rBrCrDrCrr)r8r9r:r;rGr5 __classcell__)rJs@r4r@r@es\QQ------- ((((((((r6r@)RedirectResponseceZdZdZddZdS)LegacyRedirectMiddlewarezLRedirects old URLs to the new /v1/erp/... standard and routes erp subdomain.rrcK|jj}|jdd}|dr|dvrt ddSd}||r3|jjrd |jjnd}t d ||d S||d{VS) Nr)zerp.)/z/landingz /landing.htmlz/v1/erp/dashboardi.)r"r)z /dashboardz/loginz/takeoffz/drawing-takeoffz/material-pricesz/material-price-comparisonz /state-pricesz /zalo-crmz/documents-dashboardz /documentsz /projectsz/wbsz/financez /war-roomz /employeesz/usersz /equipmentz /invoicesz/bankingz /partnersz/vendorsz /customersz/dhsz /agent-modelsz /site-diaryz /site-pwaz /settings?z/v1/erpi-)r"r*r+getlowerr,rWquery)r-rr.r*r)legacy_prefixesr`s r4r5z!LegacyRedirectMiddleware.dispatchs{""62..4466 ??6 " " Nt/Q'Q'Q#(;MMM M  ??? + + R/6{/@H+ )+++bE#(?$(?(?(?SQQQ QYw'''''''''r6NrUr7r<r6r4rYrYs.VV((((((r6rY) __future__rloggingr$ urllib.parserstarlette.middleware.baserstarlette.requestsrstarlette.responsesrr getLoggerr&r#r collectionsr=r>rNr@rWrYr<r6r4rjsc""""""a 888888&&&&&&66666666  0 1 1$>>>>>#5>>>@+*******  ( ( ( ( (&8 ( ( (D100000(((((1(((((r6