Patched results for branch: master

[patched-codes]

This pull request from patched fixes 10 issues.

---

• File changed: slips_files/common/slips_utils.py
  Updated API endpoint to use HTTPS

  The code diff shows that the API endpoint used in the code has been changed from 'http://ipinfo.io/json' to 'https://ipinfo.io/json'. This change is made to enhance the security of the data transmission by using HTTPS instead of HTTP.

• File changed: modules/ip_info/asn_info.py
  Changed API request from HTTP to HTTPS

  The code diff shows that the URL used to make API requests has been changed from HTTP to HTTPS. This is a security improvement as HTTPS is a secure version of HTTP. It ensures that the data sent between the user and the site is encrypted and cannot be intercepted. No other changes have been made.

• File changed: modules/http_analyzer/http_analyzer.py
  Updated the user agent information retrieval method to use HTTPS and added error handling.

  The code diff shows that the method for retrieving user agent information from an online database has been updated. The URL used for the request has been changed from HTTP to HTTPS, improving the security of the request. Additionally, the request now verifies the SSL certificate of the server. Error handling has been added to the request, raising an exception if the response status code is not 200 or if the response text is empty. The JSON response is then parsed and returned. If there is an error in parsing the JSON, an exception is raised and False is returned.

• File changed: modules/RiskIQ/RiskIQ.py
  Enabled SSL/TLS certificate validation

  The code diff changes the 'verify' parameter from False to True in a network request. This change enables SSL/TLS certificate validation, which was previously disabled.

• File changed: modules/CESNET/warden_client.py
  Added SSL context for secure server authentication

  The diff introduces the use of SSL context for secure server authentication. It creates a default SSL context, sets the hostname check to True, and requires a certificate. If a CA file is provided, it loads the verify locations from it. If a key file and a certificate file are provided, it loads the certificate chain from them. If ciphers are provided, it sets them in the context. The context is then used in the server creation instead of the key file and certificate file.

• File changed: docker/ubuntu-image/Dockerfile
  Security enhancement: Running service as non-root user

  The diff corrects a typo in a comment and introduces a significant security improvement. It creates a new user 'slipsuser' and assigns ownership of the SLIPS_DIR directory to this user. The service is then run as this non-root user. Additionally, the redis-server is started without daemonizing and with protected mode turned off.

• File changed: docker/macosm1-image/Dockerfile
  Changed the way redis-server is started and bash is run in Dockerfile

  The diff changes the command used to start the redis-server and bash in a Dockerfile. Previously, the redis-server was started in daemon mode and bash was run directly. Now, the redis-server is started as a service and bash is run in a non-privileged mode using the 'nobody' user.

• File changed: docker/macosm1-P2P-image/Dockerfile
  Implementing non-root user for running the service

  The diff removes the command that runs the redis-server as a daemon and the bash shell as root. It then adds commands to create a non-root user 'slipsuser', assigns ownership of the SLIPS_DIR directory to this user, and switches to this user. Finally, it runs the redis-server as a daemon and the bash shell as the non-root user.

• File changed: slips_files/core/database/sqlite_db/database.py
  Refactor SQL query to use parameterized input

  The change in the code diff is a modification of a SQL query. Previously, the query was constructed using string formatting, which can lead to SQL injection vulnerabilities. The updated code uses parameterized input, which is a safer way to include user-provided input in a SQL query.

• File changed: docker/docker-compose.yml
  Updated Docker volume bindings for security enhancement

  The diff shows changes in the Docker configuration file. The previous configuration was binding the local directories "config" and "dataset" to the directories "/StratosphereLinuxIPS/config/" and "/StratosphereLinuxIPS/dataset/" in the Docker container. The new configuration is doing the same, but with more explicit syntax and with the addition of the "read_only: true" option. This means that the Docker container will not be able to write to these directories, only read from them.