HTTP Data
HTTP:collect()/HTTP:collect(size)
Instructs FortiWeb to buffer and make available the HTTP request or response body for inspection in subsequent script events. Specifying a partial size can help reduce latency or processing overhead when only a small portion of the body is needed to make decisions. When partial collection is used, the HTTP_DATA_REQUEST or HTTP_DATA_RESPONSE event is triggered as soon as the specified number of bytes is available.
Syntax
HTTP:collect/HTTP:collect(size)
Arguments
|
Name |
Description |
|---|---|
| size | The number of bytes to collect from the HTTP body.
|
Events
Applicable in HTTP_REQUEST, HTTP_RESPONSE.
Examples
Full Body Collection
when HTTP_REQUEST {
if HTTP:header(“content-type”) == text/css
HTTP::collect()
end
}
when HTTP_DATA_REQUEST {
local body_str = HTTP:body()
debug("body = %s", body_str)
}
Partial Body Collection
when HTTP_REQUEST {
HTTP:collect(32) -- collect first 32 bytes of the body
}
when HTTP_DATA_REQUEST {
local body_sample = HTTP:body(0, 32)
if body_sample then
debug("partial collect body information, partial body = %s", body sample)
end
}
|
|
HTTP:body(offset, size)
The HTTP body will be returned.
Syntax
HTTP:body(offset, size)
Arguments
|
Name |
Description |
|---|---|
|
offset |
Optional; if offset is missing, it will be set as zero. |
| size | The number of bytes to collect from the HTTP body.
|
Events
Applicable in HTTP_DATA_REQUEST, HTTP_DATA_RESPONSE.
Example
when HTTP_REQUEST {
HTTP:collect()
}
--This function will change "username:test" to "username:Test"
function username_first_char_uppercase(str)
local str1 = str:sub(1, 9)
local str2 = str:sub(10, 10)
str2 = str2:upper()
local str3 = str:sub(11, -1)
return str1..str2..str3
end
when HTTP_DATA_REQUEST {
local body_str = HTTP:body(0, 16)
local body_new = body_str:gsub("username:[A-Za-z][A-Za-z0-9_]+", username_first_char_uppercase)
debug("body old = %s, body new = %s\n", body_str, body_new)
HTTP:set_body(body_new, 0, 16)
}
HTTP:set_body(body, offset, size)
Set body at target place, return true/false based on the result
Syntax
HTTP:set_body(body, offset, size)
Arguments
|
Name |
Description |
|---|---|
|
body |
String type HTTP body. |
|
offset |
Optional; if offset is missing, it will be set as zero. |
| size | The number of bytes to collect from the HTTP body.
|
Events
Applicable in HTTP_DATA_REQUEST, HTTP_DATA_RESPONSE.
Example
when HTTP_REQUEST {
HTTP:collect()
}
--This function will change "username:test" to "username:Test"
function username_first_char_uppercase(str)
local str1 = str:sub(1, 9)
local str2 = str:sub(10, 10)
str2 = str2:upper()
local str3 = str:sub(11, -1)
return str1..str2..str3
end
when HTTP_DATA_REQUEST {
local body_str = HTTP:body(0, 16)
local body_new = body_str:gsub("username:[A-Za-z][A-Za-z0-9_]+", username_first_char_uppercase)
debug("body old = %s, body new = %s\n", body_str, body_new)
HTTP:set_body(body_new, 0, 16)
}