Class: Rack::AI::Features::SecurityScanner
- Inherits:
-
Object
- Object
- Rack::AI::Features::SecurityScanner
- Defined in:
- lib/rack/ai/features/security_scanner.rb
Instance Attribute Summary collapse
-
#config ⇒ Object
readonly
Returns the value of attribute config.
-
#name ⇒ Object
readonly
Returns the value of attribute name.
Instance Method Summary collapse
- #enabled? ⇒ Boolean
-
#initialize(config) ⇒ SecurityScanner
constructor
A new instance of SecurityScanner.
- #process_request(env) ⇒ Object
- #process_response? ⇒ Boolean
Constructor Details
#initialize(config) ⇒ SecurityScanner
Returns a new instance of SecurityScanner.
9 10 11 12 |
# File 'lib/rack/ai/features/security_scanner.rb', line 9 def initialize(config) @name = :security_scanner @config = config end |
Instance Attribute Details
#config ⇒ Object (readonly)
Returns the value of attribute config.
7 8 9 |
# File 'lib/rack/ai/features/security_scanner.rb', line 7 def config @config end |
#name ⇒ Object (readonly)
Returns the value of attribute name.
7 8 9 |
# File 'lib/rack/ai/features/security_scanner.rb', line 7 def name @name end |
Instance Method Details
#enabled? ⇒ Boolean
14 15 16 |
# File 'lib/rack/ai/features/security_scanner.rb', line 14 def enabled? @config.feature_enabled?(:security_scanner) end |
#process_request(env) ⇒ Object
22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 |
# File 'lib/rack/ai/features/security_scanner.rb', line 22 def process_request(env) return { processed: false, reason: "disabled" } unless enabled? threats = [] risk_score = 0.0 # Check for various security threats threats.concat(check_sql_injection(env)) threats.concat(check_xss_attempts(env)) threats.concat(check_path_traversal(env)) threats.concat(check_command_injection(env)) threats.concat(check_suspicious_headers(env)) threats.concat(check_malicious_user_agents(env)) # Calculate overall risk score risk_score = calculate_risk_score(threats) threat_level = determine_threat_level(risk_score) { processed: true, action: determine_action(threat_level), threats: threats, risk_score: risk_score, threat_level: threat_level, feature: @name, timestamp: Time.now.iso8601 } end |
#process_response? ⇒ Boolean
18 19 20 |
# File 'lib/rack/ai/features/security_scanner.rb', line 18 def process_response? false end |