duck.http.middlewares.security.url

Module containing middleware classes for inspecting URLs for various attacks like XSS and SQL Injection.

Module Contents

Classes

CommandInjectionMiddleware	CommandInjectionMiddleware class mitigating against command injection attacks.
SQLInjectionMiddleware	SQLInjectionMiddleware class mitigating against SQL injection attacks.
URLSecurityMiddleware	URLSecurityMiddleware class checking URL correctness.
XSSMiddleware	XSSMiddleware class mitigating against XSS attacks.

API

class duck.http.middlewares.security.url.CommandInjectionMiddleware

Bases: duck.http.middlewares.BaseMiddleware

CommandInjectionMiddleware class mitigating against command injection attacks.

debug_message

‘Command Injection Middleware: Potential URL command injection’

classmethod get_error_response(request) → duck.http.response.HttpBadRequestResponse

Returns appropriate error response.

classmethod process_request(request)

Check request’s URL for potential command injection.

class duck.http.middlewares.security.url.SQLInjectionMiddleware

Bases: duck.http.middlewares.BaseMiddleware

SQLInjectionMiddleware class mitigating against SQL injection attacks.

debug_message: str

‘SQL Injection Middleware: Potential URL SQL injection’

classmethod get_error_response(request) → duck.http.response.HttpBadRequestResponse

Returns appropriate error response.

classmethod process_request(request)

Check for SQL injection in request’s URL

class duck.http.middlewares.security.url.URLSecurityMiddleware

Bases: duck.http.middlewares.BaseMiddleware

URLSecurityMiddleware class checking URL correctness.

debug_message: str

‘URL Security Middleware: Malformed URL’

classmethod get_error_response(request) → duck.http.response.HttpBadRequestResponse

Returns an appropriate response upon error.

classmethod process_request(request)

Process basic URL checks on the request.

class duck.http.middlewares.security.url.XSSMiddleware

Bases: duck.http.middlewares.BaseMiddleware

XSSMiddleware class mitigating against XSS attacks.

debug_message: str

‘XSS Middleware: Potential URL XSS’

classmethod get_error_response(request) → duck.http.response.HttpBadRequestResponse

Returns appropriate error response.

classmethod process_request(request)

Process and check for URL XSS in request.