1
|
|
|
import os |
|
|
|
|
2
|
|
|
import logging |
|
|
|
|
3
|
|
|
|
4
|
|
|
from flask import Blueprint, render_template, request, redirect, flash |
|
|
|
|
5
|
|
|
from sqlalchemy.exc import SQLAlchemyError |
|
|
|
|
6
|
|
|
|
7
|
|
|
from spike.model import db |
8
|
|
|
from spike.model.naxsi_rules import ValueTemplates |
9
|
|
|
|
10
|
|
|
settings = Blueprint('settings', __name__) |
|
|
|
|
11
|
|
|
|
12
|
|
|
|
13
|
|
|
@settings.route("/mz") |
14
|
|
|
def mz_index(): |
|
|
|
|
15
|
|
|
mz = ValueTemplates.query.filter(ValueTemplates.name == "naxsi_mz").order_by(ValueTemplates.value).all() |
|
|
|
|
16
|
|
|
if not mz: |
17
|
|
|
return redirect("/settings") |
18
|
|
|
return render_template("settings/mz.html", mz=mz) |
19
|
|
|
|
20
|
|
|
|
21
|
|
|
@settings.route("/mz/del", methods=["POST"]) |
|
|
|
|
22
|
|
|
def mz_del(): |
|
|
|
|
23
|
|
|
dmz = ValueTemplates.query.filter(ValueTemplates.id == request.form["mzid"]).first() |
|
|
|
|
24
|
|
|
if not dmz: |
25
|
|
|
flash("Nothing found in %s " % (request.form["mzid"]), "error") |
26
|
|
|
return redirect("/settings/mz") |
27
|
|
|
|
28
|
|
|
db.session.delete(dmz) |
29
|
|
|
try: |
30
|
|
|
db.session.commit() |
31
|
|
|
flash("OK: deleted %s " % dmz.value, "success") |
32
|
|
|
except SQLAlchemyError: |
33
|
|
|
flash("ERROR while trying to delete : %s" % dmz.value, "error") |
34
|
|
|
return redirect("/settings/mz") |
35
|
|
|
|
36
|
|
|
|
37
|
|
|
@settings.route("/mz/new", methods=["POST"]) |
38
|
|
|
def mz_new(): |
|
|
|
|
39
|
|
|
db.session.add(ValueTemplates("naxsi_mz", request.form["nmz"])) |
40
|
|
|
db.session.commit() |
41
|
|
|
flash("Updated MZ: %s" % request.form["nmz"], "success") |
42
|
|
|
return redirect("/settings/mz") |
43
|
|
|
|
44
|
|
|
|
45
|
|
|
@settings.route("/scores") |
46
|
|
|
def scores_index(): |
|
|
|
|
47
|
|
|
sc = ValueTemplates.query.filter(ValueTemplates.name == "naxsi_score").order_by(ValueTemplates.value).all() |
|
|
|
|
48
|
|
|
if not sc: |
49
|
|
|
return redirect("/settings") |
50
|
|
|
return render_template("settings/scores.html", scores=sc) |
51
|
|
|
|
52
|
|
|
|
53
|
|
|
@settings.route("/scores/new", methods=["POST"]) |
54
|
|
|
def scores_new(): |
|
|
|
|
55
|
|
|
if not request.form["nscore"].startswith("$"): |
56
|
|
|
request.form["nscore"] = '$' + request.form["nscore"] |
57
|
|
|
|
58
|
|
|
db.session.add(ValueTemplates("naxsi_score", request.form["nscore"].upper())) |
59
|
|
|
db.session.commit() |
60
|
|
|
flash("Updated Score: %s" % request.form["nscore"], "success") |
61
|
|
|
return redirect("/settings/scores") |
62
|
|
|
|
63
|
|
|
|
64
|
|
|
@settings.route("/scores/del", methods=["POST"]) |
|
|
|
|
65
|
|
|
def scoress_del(): |
|
|
|
|
66
|
|
|
dsc = ValueTemplates.query.filter(ValueTemplates.id == request.form["scid"]).first() |
|
|
|
|
67
|
|
|
if not dsc: |
68
|
|
|
flash("Nothing found in %s " % (request.form["scid"]), "error") |
69
|
|
|
return redirect("/settings/scores") |
70
|
|
|
db.session.delete(dsc) |
71
|
|
|
|
72
|
|
|
try: |
73
|
|
|
db.session.commit() |
74
|
|
|
flash("OK: deleted %s " % dsc.value, "success") |
75
|
|
|
except SQLAlchemyError: |
76
|
|
|
flash("ERROR while trying to delete : %s" % dsc.value, "error") |
77
|
|
|
return redirect("/settings/scores") |
78
|
|
|
|
The coding style of this project requires that you add a docstring to this code element. Below, you find an example for methods:
If you would like to know more about docstrings, we recommend to read PEP-257: Docstring Conventions.