[Bug] Incorrect WAF parameter rule options

[lZiMUl]

Contact Information

lZiMUl@lzimul.com

1Panel Version

2.3.0

Problem Description

(?:etc/\W*passwd)
这一条规则关不掉 并且出现两条一模一样的规则
刷新网页也没用
重启面板也没用

Steps to Reproduce

就是正常访问该选项卡

The expected correct result

No response

Related log output

Additional Information

No response

[lZiMUl]

发现配置文件 规则参数json文件 name自带错误

{
"rules": [
{
"state": "on",
"name": "000001",
"rule": "sleep\((\s*)(\d*)(\s*)\)",
"type": "sqlInject"
},
{
"state": "on",
"name": "000002",
"rule": "(exists\(|select\#|\(select|select\()",
"type": "sqlInject"
},
{
"state": "on",
"name": "000003",
"rule": "(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|preg_\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\(",
"type": "oneWordTrojan"
},
{
"state": "on",
"name": "000004",
"rule": "(?:etc\/\Wpasswd)",
"type": "dirFilter"
},
{
"state": "on",
"name": "000004",
"rule": "java\.lang",
"type": "dirFilter"
},
{
"state": "on",
"name": "000005",
"rule": "(window\['|globalThis\[|self\[|top\[|this\[|parent\[)",
"type": "xss"
},
{
"state": "on",
"name": "000006",
"rule": "(invokefunction|call_user_func_array|\\think\\)",
"type": "args"
},
{
"state": "on",
"name": "000007",
"rule": "\${jndi:",
"type": "args"
}
]
}{
"rules": [
{
"state": "on",
"name": "000001",
"rule": "sleep\((\s)(\d*)(\s*)\)",
"type": "sqlInject"
},
{
"state": "on",
"name": "000002",
"rule": "(exists\(|select\#|\(select|select\()",
"type": "sqlInject"
},
{
"state": "on",
"name": "000003",
"rule": "(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|preg_\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\(",
"type": "oneWordTrojan"
},
{
"state": "on",
"name": "000004",
"rule": "(?:etc\/\W*passwd)",
"type": "dirFilter"
},
{
"state": "on",
"name": "000004",
"rule": "java\.lang",
"type": "dirFilter"
},
{
"state": "on",
"name": "000005",
"rule": "(window\['|globalThis\[|self\[|top\[|this\[|parent\[)",
"type": "xss"
},
{
"state": "on",
"name": "000006",
"rule": "(invokefunction|call_user_func_array|\\think\\)",
"type": "args"
},
{
"state": "on",
"name": "000007",
"rule": "\${jndi:",
"type": "args"
}
]
}

两个 "name": "000004",

{
  "state": "on",
  "name": "000004",
  "rule": "(?:etc\\/\\W*passwd)",
  "type": "dirFilter"
},
{
  "state": "on",
  "name": "000004",
  "rule": "java\\.lang",
  "typ

[zhengkunwang223]

可以在配置文件中手动删掉