8000 add support for csrf protection · nginx/kubernetes-ingress@c65bdd9 · GitHub
[go: up one dir, main page]
Skip to content

Commit c65bdd9

Browse files
author
Rafal Wegrzycki
committed
add support for csrf protection
1 parent 126914b commit c65bdd9

File tree

2 files changed

+188
-0
lines changed

2 files changed

+188
-0
lines changed

‎deployments/common/crds/appprotect.f5.com_appolicies.yaml‎

Lines changed: 94 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -166,6 +166,7 @@ spec:
166166
- VIOL_GRPC_METHOD
167167
- VIOL_PARAMETER_ARRAY_VALUE
168168
- VIOL_PARAMETER_VALUE_REGEXP
169+
- VIOL_CSRF
169170
- VIOL_PARAMETER_VALUE_BASE64
170171
- VIOL_MANDATORY_HEADER
171172
- VIOL_HEADER_REPEATED
@@ -386,6 +387,40 @@ spec:
386387
type: integer
387388
type: object
388389
type: array
390+
csrf-protection:
391+
properties:
392+
enabled:
393+
type: boolean
394+
expirationTimeInSeconds:
395+
pattern: disabled|\d+
396+
type: string
397+
sslOnly:
398+
type: boolean
399+
type: object
400+
csrf-urls:
401+
items:
402+
properties:
403+
$action:
404+
enum:
405+
- delete
406+
type: string
407+
enforcementAction:
408+
enum:
409+
- verify-origin
410+
- none
411+
type: string
412+
method:
413+
enum:
414+
- GET
415+
- POST
416+
- any
417+
type: string
418+
url:
419+
type: string
420+
wildcardOrder:
421+
type: integer
422+
type: object
423+
type: array
389424
data-guard:
390425
properties:
391426
creditCardNumbers:
@@ -618,6 +653,19 @@ spec:
618653
type: integer
619654
type: object
620655
type: array
656+
host-names:
657+
items:
658+
properties:
659+
$action:
660+
enum:
661+
- delete
662+
type: string
663+
includeSubdomains:
664+
type: boolean
665+
name:
666+
type: string
667+
type: object
668+
type: array
621669
idl-files:
622670
items:
623671
properties:
@@ -1180,13 +1228,57 @@ spec:
11801228
items:
11811229
properties:
11821230
$action:
1231+
enum:
1232+
- delete
1233+
type: string
1234+
allowRenderingInFrames:
1235+
enum:
1236+
- never
1237+
- only-same
1238+
type: string
1239+
allowRenderingInFramesOnlyFrom:
11831240
type: string
11841241
attackSignaturesCheck:
11851242
type: boolean
1243+
clickjackingProtection:
1244+
type: boolean
11861245
description:
11871246
type: string
11881247
disallowFileUploadOfExecutables:
11891248
type: boolean
1249+
html5CrossOriginRequestsEnforcement:
1250+
properties:
1251+
allowOriginsEnforcementMode:
1252+
enum:
1253+
- replace-with
1254+
- unmodified
1255+
type: string
1256+
checkAllowedMethods:
1257+
type: boolean
1258+
crossDomainAllowedOrigin:
1259+
items:
1260+
properties:
1261+
includeSubDomains:
1262+
type: boolean
1263+
originName:
1264+
type: string
1265+
originPort:
1266+
pattern: any|\d+
1267+
type: string
1268+
originProtocol:
1269+
enum:
1270+
- http
1271+
- http/https
1272+
- https
1273+
type: string
1274+
type: object
1275+
type: array
1276+
enforcementMode:
1277+
enum:
1278+
- disabled
1279+
- enforce
1280+
type: string
1281+
type: object
11901282
isAllowed:
11911283
type: boolean
11921284
mandatoryBody:
@@ -1298,6 +1390,8 @@ spec:
12981390
type: boolean
12991391
name:
13001392
type: string
1393+
operationId:
1394+
type: string
13011395
positionalParameters:
13021396
items:
13031397
properties:

‎deployments/helm-chart/crds/appprotect.f5.com_appolicies.yaml‎

Lines changed: 94 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -166,6 +166,7 @@ spec:
166166
- VIOL_GRPC_METHOD
167167
- VIOL_PARAMETER_ARRAY_VALUE
168168
- VIOL_PARAMETER_VALUE_REGEXP
169+
- VIOL_CSRF
169170
- VIOL_PARAMETER_VALUE_BASE64
170171
- VIOL_MANDATORY_HEADER
171172
- VIOL_HEADER_REPEATED
@@ -386,6 +387,40 @@ spec:
386387
type: integer
387388
type: object
388389
type: array
390+
csrf-protection:
391+
properties:
392+
enabled:
393+
type: boolean
394+
expirationTimeInSeconds:
395+
pattern: disabled|\d+
396+
type: string
397+
sslOnly:
398+
type: boolean
399+
type: object
400+
csrf-urls:
401+
items:
402+
properties:
403+
$action:
404+
enum:
405+
- delete
406+
type: string
407+
enforcementAction:
408+
enum:
409+
- verify-origin
410+
- none
411+
type: string
412+
method:
413+
enum:
414+
- GET
415+
- POST
416+
- any
417+
type: string
418+
url:
419+
type: string
420+
wildcardOrder:
421+
type: integer
422+
type: object
423+
type: array
389424
data-guard:
390425
properties:
391426
creditCardNumbers:
@@ -618,6 +653,19 @@ spec:
618653
type: integer
619654
type: object
620655
type: array
656+
host-names:
657+
items:
658+
properties:
659+
$action:
660+
enum:
661+
- delete
662+
type: string
663+
includeSubdomains:
664+
type: boolean
665+
name:
666+
type: string
667+
type: object
668+
type: array
621669
idl-files:
622670
items:
623671
properties:
@@ -1180,13 +1228,57 @@ spec:
11801228
items:
11811229
properties:
11821230
$action:
1231+
enum:
1232+
- delete
1233+
type: string
1234+
allowRenderingInFrames:
1235+
enum:
1236+
- never
1237+
- only-same
1238+
type: string
1239+
allowRenderingInFramesOnlyFrom:
11831240
type: string
11841241
attackSignaturesCheck:
11851242
type: boolean
1243+
clickjackingProtection:
1244+
type: boolean
11861245
description:
11871246
type: string
11881247
disallowFileUploadOfExecutables:
11891248
type: boolean
1249+
html5CrossOriginRequestsEnforcement:
1250+
properties:
1251+
allowOriginsEnforcementMode:
1252+
enum:
1253+
- replace-with
1254+
- unmodified
1255+
type: string
1256+
checkAllowedMethods:
1257+
type: boolean
1258+
crossDomainAllowedOrigin:
1259+
items:
1260+
properties:
1261+
includeSubDomains:
1262+
type: boolean
1263+
originName:
1264+
type: string
1265+
originPort:
1266+
pattern: any|\d+
1267+
type: string
1268+
originProtocol:
1269+
enum:
1270+
- http
1271+
- http/https
1272+
- https
1273+
type: string
1274+
type: object
1275+
type: array
1276+
enforcementMode:
1277+
enum:
1278+
- disabled
1279+
- enforce
1280+
type: string
1281+
type: object
11901282
isAllowed:
11911283
type: boolean
11921284
mandatoryBody:
@@ -1298,6 +1390,8 @@ spec:
12981390
type: boolean
12991391
name:
13001392
type: string
1393+
operationId:
1394+
type: string
13011395
positionalParameters:
13021396
items:
13031397
properties:

0 commit comments

Comments
 (0)
0