Added support for \aikido\should_whitelist_request API + tests + docs by tudor-timcu · Pull Request #404 · AikidoSec/firewall-php

tudor-timcu · 2026-03-23T08:39:45Z

Summary by Aikido

Security Issues: 0	🔍 Quality Issues: 5	✅ Resolved Issues: 2

🚀 New Features

Added should_whitelist_request API with tests and documentation

⚡ Enhancements

Implemented whitelist evaluation in request processor and Go handler
Extended Action/extension to support whitelisted actions and globals init

🔧 Refactors

Changed endpoint allowlist flag type to integer and updated context

^{More info}

Introduced the `should_whitelist_request` function to determine if a request is whitelisted based on IP configuration. This includes checks for endpoint-level allowlists, global bypass lists, and global allowed IP lists. Added corresponding documentation detailing the function's behavior and properties. Updated related files to support this functionality, including new tests for various whitelisting scenarios.

lib/php-extension/HandleShouldBlockRequest.cpp

lib/php-extension/include/php_aikido.h

lib/php-extension/include/HandleShouldBlockRequest.h

lib/request-processor/handle_blocking_request.go

… request initialization

Modified the `should_whitelist_request` documentation to clarify that the request IP must be in the endpoint allowlist. Updated the request processing logic to use `IsEndpointIpWhitelisted` for checking IPs against the endpoint allowlist. Refactored the context to store the allowlist status as an integer. Enhanced tests to validate multiple IPs in the global allowlist and adjusted assertions accordingly.

lib/request-processor/context/request_context.go

lib/request-processor/context/cache.go

…_request` Updated the `should_whitelist_request` documentation to specify that the global allowed IP list may include geo-location allow lists. This enhances understanding of the conditions under which a request IP is considered whitelisted.

tudor-timcu changed the title ~~Added should_whitelist_request function and related documentation~~ Added support for \aikido\should_whitelist_request API + tests + docs Mar 23, 2026