Quickstart

gem "black_lab"

bundle install

require "black_lab"

use BlackLab::Middleware
run Rails.application

BlackLab.configure do |config|
  config.block_message = "Blocked by BlackLab WAF"
  config.block_duration = 3600 # seconds to block an IP/user in cache
  config.block_callback = ->(request) { puts "Blocked #{request.ip}" }
  config.callback_threshold = 15 # points threshold to trigger callback
  config.cache_store = Rails.cache # or any object responding to #write/#read
  config.plugins = [
    BlackLab::Plugins::SqliPlugin.new(weight: 3),
    BlackLab::Plugins::XssPlugin.new(weight: 3),
    BlackLab::Plugins::PathTraversalPlugin.new(weight: 3),
    # BlackLab::Plugins::LfiPlugin.new(weight: 1),
    # BlackLab::Plugins::RfiPlugin.new(weight: 2)
  ]
end