🚩 Modify the priority of the rule

Author: ADD-SP

src/ngx_http_waf_module.c

@@ -209,10 +209,6 @@ static ngx_int_t ngx_http_waf_handler(ngx_http_request_t* r) {
 
     }
 
-    if (ngx_regex_exec_array(srv_conf->white_url, &r->uri, r->connection->log) == NGX_OK) {
-        return NGX_DECLINED;
-    }
-
     switch (r->connection->sockaddr->sa_family) {
     case AF_INET:
         if (check_ipv4(ipv4, srv_conf->block_ipv4) == SUCCESS) {
@@ -227,6 +223,10 @@ static ngx_int_t ngx_http_waf_handler(ngx_http_request_t* r) {
 
     }
 
+    if (ngx_regex_exec_array(srv_conf->white_url, &r->uri, r->connection->log) == NGX_OK) {
+        return NGX_DECLINED;
+    }
+
     if (ngx_regex_exec_array(srv_conf->block_url, &r->uri, r->connection->log) == NGX_OK) {
         ngx_log_error(NGX_LOG_ALERT, r->connection->log, 0, "ngx_waf: URL");
         return NGX_HTTP_FORBIDDEN;