diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index dfe32fe68..8f7b66201 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -598,7 +598,7 @@ jobs: echo "dpkg -i -E \"/var/www/html/aikido-php-firewall.\$(uname -i).deb\"" > ./zen-demo-php/.fly/scripts/aikido.sh - name: Run Firewall QA Tests - uses: AikidoSec/firewall-tester-action@v1.0.3 + uses: AikidoSec/firewall-tester-action@v1.0.9 with: dockerfile_path: ./zen-demo-php/Dockerfile extra_args: '--env-file=./zen-demo-php/.env.example -e APP_KEY=base64:W2v6u6VR4lURkxuMT9xZ6pdhXSt5rxsmWTbd1HGqlIM=' diff --git a/lib/request-processor/handle_blocking_request.go b/lib/request-processor/handle_blocking_request.go index b76c21e69..f148a70d3 100644 --- a/lib/request-processor/handle_blocking_request.go +++ b/lib/request-processor/handle_blocking_request.go @@ -94,7 +94,7 @@ func OnGetAutoBlockingStatus() string { if !utils.IsIpAllowed(server, ip) { log.Infof("IP \"%s\" is not found in allow lists!", ip) - return GetAction("exit", "blocked", "ip", "not in allow lists", ip, 403) + return GetAction("exit", "blocked", "ip", "not allowed to access this resource", ip, 403) } if ipMonitored, ipMonitoredMatches := utils.IsIpMonitored(server, ip); ipMonitored { diff --git a/tests/server/test_allowed_ips_lists/test.py b/tests/server/test_allowed_ips_lists/test.py index c2ca1f94b..5b09ef5d0 100755 --- a/tests/server/test_allowed_ips_lists/test.py +++ b/tests/server/test_allowed_ips_lists/test.py @@ -14,7 +14,7 @@ def run_test(): response = php_server_get("/test", headers={"X-Forwarded-For": "2.20.116.1"}) assert_response_code_is(response, 403) assert_response_header_contains(response, "Content-Type", "text") - assert_response_body_contains(response, "Your ip (2.20.116.1) is blocked due to: not in allow lists!") + assert_response_body_contains(response, "Your ip (2.20.116.1) is blocked due to: not allowed to access this resource!") response = php_server_get("/test", headers={"X-Forwarded-For": "2.17.116.2"}) assert_response_code_is(response, 200) @@ -30,7 +30,7 @@ def run_test(): response = php_server_get("/test", headers={"X-Forwarded-For": "2.20.116.1"}) assert_response_code_is(response, 403) assert_response_header_contains(response, "Content-Type", "text") - assert_response_body_contains(response, "Your ip (2.20.116.1) is blocked due to: not in allow lists!") + assert_response_body_contains(response, "Your ip (2.20.116.1) is blocked due to: not allowed to access this resource!") response = php_server_get("/test", headers={"X-Forwarded-For": "2.17.116.2"}) assert_response_code_is(response, 200)