双十一Web威胁智能拦截购买

import re

def is_malicious_request(request):
    # 定义恶意请求的正则表达式模式
    malicious_patterns = [
        r'select\s+.*\s+from\s+users',  # 简单的SQL注入检测
        r'javascript:',  # XSS攻击检测
    ]
    
    for pattern in malicious_patterns:
        if re.search(pattern, request):
            return True
    return False

# 模拟请求处理
def handle_request(request):
    if is_malicious_request(request):
        print("拦截到恶意请求:", request)
        return "请求被拒绝"
    else:
        print("正常请求:", request)
        return "请求已处理"

# 测试
test_requests = [
    "GET /search?q=books HTTP/1.1",
    "POST /login?username=admin&password=' OR '1'='1 HTTP/1.1",  # 模拟SQL注入
    "GET /page?redirect=javascript:alert('XSS') HTTP/1.1"  # 模拟XSS攻击
]

for req in test_requests:
    handle_request(req)