feat: add 438 error page

aasaam · Jan 16, 2023 · 91f5d6b · 91f5d6b
1 parent e4706af
commit 91f5d6b
Show file tree

Hide file tree

Showing 5 changed files with 34 additions and 1 deletion.
diff --git a/nginx/.defaults/error-pages/438.html b/nginx/.defaults/error-pages/438.html
@@ -0,0 +1,6 @@
+<html>
+<head><title>438 Intrusion Detected</title></head>
+<body>
+<center><h1>438 Intrusion Detected</h1></center>
+</body>
+</html>
diff --git a/nginx/.defaults/naxi/location.conf b/nginx/.defaults/naxi/location.conf
@@ -22,6 +22,5 @@ BasicRule wl:0 "mz:$HEADERS_VAR:sec-fetch-mode";
 BasicRule wl:0 "mz:$HEADERS_VAR:sec-fetch-site";
 BasicRule wl:0 "mz:$HEADERS_VAR:sec-fetch-user";
 
-# TODO: add cookie protection
 BasicRule wl:1002 "mz:$HEADERS_VAR:cookie"; # hex like caracters
 BasicRule wl:1206 "mz:$HEADERS_VAR:cookie"; # base64 `/` character
diff --git a/nginx/.defaults/naxi/server_debug.conf b/nginx/.defaults/naxi/server_debug.conf
@@ -0,0 +1,16 @@
+set $naxsi_extensive_log 1;
+set $naxsi_flag_enable 1;
+set $naxsi_flag_learning $cookie_waf_learning;
+
+location = /.well-known/438 {
+  set $naxsi_flag_enable 0;
+  auth_request off;
+  allow all;
+  return 438;
+}
+
+error_page 438 /438.html;
+location = /438.html {
+  internal;
+  root /.defaults/error-pages;
+}
diff --git a/nginx/.defaults/naxi/server_enable.conf b/nginx/.defaults/naxi/server_enable.conf
@@ -8,3 +8,9 @@ location = /.well-known/438 {
   allow all;
   return 438;
 }
+
+error_page 438 /438.html;
+location = /438.html {
+  internal;
+  root /.defaults/error-pages;
+}
diff --git a/nginx/.defaults/naxi/server_learning.conf b/nginx/.defaults/naxi/server_learning.conf
@@ -8,3 +8,9 @@ location = /.well-known/438 {
   allow all;
   return 438;
 }
+
+error_page 438 /438.html;
+location = /438.html {
+  internal;
+  root /.defaults/error-pages;
+}