mirror of
https://github.com/Ky0toFu/Mirror-Flowers.git
synced 2025-09-18 13:01:23 +00:00
55 lines
2.0 KiB
Python
55 lines
2.0 KiB
Python
|
class ConfigAnalyzer:
|
||
|
|
def __init__(self):
|
||
|
|
self.dangerous_configs = {
|
||
|
|
'php': {
|
||
|
|
'allow_url_fopen': 'On',
|
||
|
|
'allow_url_include': 'On',
|
||
|
|
'display_errors': 'On',
|
||
|
|
'expose_php': 'On'
|
||
|
|
},
|
||
|
|
'java': {
|
||
|
|
'debug': 'true',
|
||
|
|
'trace': 'true',
|
||
|
|
'security.basic.enabled': 'false'
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
# 添加更多配置检查规则
|
||
|
|
self.security_rules = {
|
||
|
|
'authentication': {
|
||
|
|
'required_settings': ['session.cookie_secure', 'session.cookie_httponly'],
|
||
|
|
'forbidden_settings': ['session.use_only_cookies=0']
|
||
|
|
},
|
||
|
|
'file_upload': {
|
||
|
|
'check_settings': ['upload_max_filesize', 'max_file_uploads'],
|
||
|
|
'risk_values': ['unlimited', '-1']
|
||
|
|
},
|
||
|
|
'error_reporting': {
|
||
|
|
'production_settings': {
|
||
|
|
'display_errors': 'Off',
|
||
|
|
'log_errors': 'On',
|
||
|
|
'error_reporting': 'E_ALL & ~E_DEPRECATED & ~E_STRICT'
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
def analyze(self, config_files):
|
||
|
|
"""增强的配置分析"""
|
||
|
|
issues = []
|
||
|
|
|
||
|
|
for file_path in config_files:
|
||
|
|
config_type = self._detect_config_type(file_path)
|
||
|
|
|
||
|
|
# 基本配置检查
|
||
|
|
basic_issues = self._check_dangerous_settings(file_path, config_type)
|
||
|
|
issues.extend(basic_issues)
|
||
|
|
|
||
|
|
# 环境特定检查
|
||
|
|
env_issues = self._check_environment_specific(file_path, config_type)
|
||
|
|
issues.extend(env_issues)
|
||
|
|
|
||
|
|
# 安全规则检查
|
||
|
|
security_issues = self._check_security_rules(file_path, config_type)
|
||
|
|
issues.extend(security_issues)
|
||
|
|
|
||
|
|
return self._prioritize_issues(issues)
|