| import os |
| from dotenv import load_dotenv |
|
|
| load_dotenv() |
|
|
| class SecurityConfig: |
| HONEYPOTS = ["/api/admin", "/api/secret", "/admin", "/secret"] |
| BLOCKED_PATTERNS = [r"rm -rf", r"wget.*malicious", r"curl.*evil"] |
| ALLOWED_COMMANDS = ["ls", "cat", "grep", "python3"] |
| BASELINE_THRESHOLD = 10 |
| |
| @classmethod |
| def is_honeypot(cls, path: str) -> bool: |
| return path in cls.HONEYPOTS |
| |
| @classmethod |
| def is_blocked(cls, command: str) -> bool: |
| import re |
| for pattern in cls.BLOCKED_PATTERNS: |
| if re.search(pattern, command): |
| return True |
| return False |
| |
| @classmethod |
| def is_allowed(cls, command: str) -> bool: |
| base_cmd = command.split()[0] if command else "" |
| return base_cmd in cls.ALLOWED_COMMANDS |
