Exemple #1
0
def new():
    if request.method == "GET":
        _whitelistesets = NaxsiWhitelistSets.query.all()
        return render_template('whitelists/new.html', matchzones=naxsi_mz, whitelistsets=_whitelistesets)

    logging.debug('Posted new request: %s', request.form)

    mz = request.form.getlist("mz") + request.form.getlist("custom_mz_val")
    wid = request.form.get('wl', '')
    whitelistset = request.form.get("whitelistset", '')

    if not wid:
        flash('Please enter a wl', category='error')
        return render_template('whitelists/new.html')
    elif not whitelistset:
        flash('Please enter a whitelistset', category='error')
        return render_template('whitelists/new.html')

    wlist = NaxsiWhitelist(wl=wid, timestamp=int(time()),
                           whitelistset=whitelistset, mz=mz, active=1,
                           negative=request.form.get("negative", "") == 'checked')
    errors, warnings = wlist.validate()

    if errors:
        flash(",".join(errors), 'error')
        return redirect(url_for('whitelists.new'))
    elif warnings:
        flash(",".join(warnings), 'warning')

    wlist.mz = '|'.join(wlist.mz)
    db.session.add(wlist)
    db.session.commit()

    return render_template('whitelists/index.html')
Exemple #2
0
def new():
    if request.method == "GET":
        _whitelistesets = NaxsiWhitelistSets.query.all()
        return render_template('whitelists/new.html', matchzones=naxsi_mz, whitelistsets=_whitelistesets)

    logging.debug('Posted new request: %s', request.form)

    mz = request.form.getlist("mz") + request.form.getlist("custom_mz_val")
    wid = request.form.get('wl', '')
    whitelistset = request.form.get("whitelistset", '')

    if not wid:
        flash('Please enter a wl', category='error')
        return render_template('whitelists/new.html')
    elif not whitelistset:
        flash('Please enter a whitelistset', category='error')
        return render_template('whitelists/new.html')

    wlist = NaxsiWhitelist(wl=wid, timestamp=int(time()),
                           whitelistset=whitelistset, mz=mz, active=1,
                           negative=request.form.get("negative", "") == 'checked')
    errors, warnings = wlist.validate()

    if errors:
        flash(",".join(errors), 'error')
        return redirect(url_for('whitelists.new'))
    elif warnings:
        flash(",".join(warnings), 'warning')

    wlist.mz = '|'.join(wlist.mz)
    db.session.add(wlist)
    db.session.commit()

    return render_template('whitelists/index.html')