duck.http.middlewares.security.url¶
Module containing middleware classes for inspecting urls for various attacks like XSS and SQL Injection.
Module Contents¶
Classes¶
CommandInjectionMiddleware class mitigating against command injection attacks. |
|
SQLInjectionMiddleware class mitigating against SQL injection attacks. |
|
URLSecurityMiddleware class checking URL correctness. |
|
XSSMiddleware class mitigating against XSS attacks. |
API¶
- class duck.http.middlewares.security.url.CommandInjectionMiddleware¶
Bases:
duck.http.middlewares.BaseMiddlewareCommandInjectionMiddleware class mitigating against command injection attacks.
- debug_message: str¶
‘CommandInjectionMiddleware: Potential URL command injection’
- classmethod get_error_response(request)¶
- classmethod process_request(request)¶
- class duck.http.middlewares.security.url.SQLInjectionMiddleware¶
Bases:
duck.http.middlewares.BaseMiddlewareSQLInjectionMiddleware class mitigating against SQL injection attacks.
- debug_message: str¶
‘SQLInjectionMiddleware: Potential URL sql injection’
- classmethod get_error_response(request)¶
- classmethod process_request(request)¶
- class duck.http.middlewares.security.url.URLSecurityMiddleware¶
Bases:
duck.http.middlewares.BaseMiddlewareURLSecurityMiddleware class checking URL correctness.
- debug_message: str¶
‘URLSecurityMiddleware: Malformed URL’
- classmethod get_error_response(request)¶
- classmethod process_request(request)¶
- class duck.http.middlewares.security.url.XSSMiddleware¶
Bases:
duck.http.middlewares.BaseMiddlewareXSSMiddleware class mitigating against XSS attacks.
- debug_message: str¶
‘XSSMiddleware: Potential url xss’
- classmethod get_error_response(request)¶
- classmethod process_request(request)¶