Page MenuHomeWickedGov Phorge
Files F4052091

TorExitNodes.php
No OneTemporary
Actions

Size
6 KB
Referenced Files
None
Subscribers
None

TorExitNodes.php
View Options

<?php
/**
* Prevents Tor exit nodes from editing a wiki.
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License along
* with this program; if not, write to the Free Software Foundation, Inc.,
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
* http://www.gnu.org/copyleft/gpl.html
*
* @file
* @ingroup Extensions
* @link https://www.mediawiki.org/wiki/Extension:TorBlock Documentation
*
* @author Andrew Garrett <andrew@epstone.net>
* @license GPL-2.0-or-later
*/
namespace MediaWiki\Extension\TorBlock;
use MediaWiki\Context\RequestContext;
use MediaWiki\Json\FormatJson;
use MediaWiki\MediaWikiServices;
use Wikimedia\IPUtils;
use Wikimedia\ObjectCache\CachedBagOStuff;
/**
* Collection of functions maintaining the list of Tor exit nodes.
*/
class TorExitNodes {
/**
* Determine if a given IP is a Tor exit node
*
* @param string|null $ip The IP address to check, or null to use the request IP
* @return bool True if an exit node, false otherwise
*/
public static function isExitNode( $ip = null ) {
if ( $ip == null ) {
$ip = RequestContext::getMain()->getRequest()->getIP();
}
return in_array( IPUtils::sanitizeIP( $ip ), self::getExitNodes() );
}
/**
* Get the array of Tor exit nodes using caching
*
* @return string[] List of Tor exit node addresses
*/
public static function getExitNodes() {
static $srvCache;
if ( $srvCache === null ) {
$srvCache = new CachedBagOStuff(
MediaWikiServices::getInstance()->getLocalServerObjectCache()
);
}
return $srvCache->getWithSetCallback(
$srvCache->makeGlobalKey( 'tor-exit-nodes' ),
$srvCache::TTL_HOUR,
function () {
$wanCache = MediaWikiServices::getInstance()->getMainWANObjectCache();
return $wanCache->getWithSetCallback(
$wanCache->makeGlobalKey( 'tor-exit-nodes' ),
$wanCache::TTL_DAY,
function () {
return self::fetchExitNodes();
},
[
// Avoid stampedes on TOR list servers due to cache expiration
'lockTSE' => $wanCache::TTL_DAY,
'staleTTL' => $wanCache::TTL_DAY,
// Avoid stampedes on TOR list servers due to cache eviction
'busyValue' => []
]
);
}
);
}
/**
* Load the list of Tor exit nodes from the source and cache it for future use
*
* Do not call this method during HTTP GET/HEAD requests
*
* @return string[] List of Tor exit node addresses
*/
public static function loadExitNodes() {
$nodes = self::fetchExitNodes();
$wanCache = MediaWikiServices::getInstance()->getMainWANObjectCache();
$wanCache->set( $wanCache->makeGlobalKey( 'tor-exit-nodes' ), $nodes, $wanCache::TTL_DAY );
return $nodes;
}
/**
* Get the list of Tor exit nodes from the configured source
*
* @return string[] List of Tor exit node addresses
*/
private static function fetchExitNodes() {
wfDebugLog( 'torblock', "Loading Tor exit node list cold." );
if ( defined( 'MW_PHPUNIT_TEST' ) || defined( 'MW_QUIBBLE_CI' ) ) {
// Avoid HTTP requests, see T265628 & T390865
// TEST-NET-1, RFC 5737
return [ '192.0.2.111', '192.0.2.222' ];
}
return self::fetchExitNodesFromOnionooServer() ?: self::fetchExitNodesFromTorProject();
}
/**
* Get the list of Tor exit nodes from the Tor Project's website.
*
* @return string[] List of Tor exit node addresses
*/
private static function fetchExitNodesFromTorProject() {
global $wgTorIPs, $wgTorProjectCA, $wgTorBlockProxy;
$options = [
'caInfo' => is_readable( $wgTorProjectCA ) ? $wgTorProjectCA : null
];
if ( $wgTorBlockProxy ) {
$options['proxy'] = $wgTorBlockProxy;
}
$httpRequestFactory = MediaWikiServices::getInstance()->getHttpRequestFactory();
$nodes = [];
foreach ( $wgTorIPs as $ip ) {
$url = 'https://check.torproject.org/torbulkexitlist?ip=' . $ip;
$data = $httpRequestFactory->get( $url, $options, __METHOD__ );
if ( $data === null ) {
wfDebugLog( 'torblock', "Got no reply or an invalid reply from $url.\n" );
continue;
}
$lines = explode( "\n", $data );
foreach ( $lines as $line ) {
if ( strpos( $line, '#' ) === false ) {
$nodes[trim( $line )] = true;
}
}
}
return array_keys( $nodes );
}
/**
* Get the list of Tor exit nodes using the Onionoo protocol with the
* server specified in the configuration.
*
* @return string[] List of Tor exit node addresses
*/
private static function fetchExitNodesFromOnionooServer() {
global $wgTorOnionooServer, $wgTorOnionooCA, $wgTorBlockProxy;
$services = MediaWikiServices::getInstance();
$url = $services->getUrlUtils()->expand(
"$wgTorOnionooServer/details?type=relay&running=true&flag=Exit&fields=or_addresses,exit_addresses",
PROTO_HTTPS
);
$options = [
'caInfo' => is_readable( $wgTorOnionooCA ) ? $wgTorOnionooCA : null
];
if ( $wgTorBlockProxy ) {
$options['proxy'] = $wgTorBlockProxy;
}
$raw = $services->getHttpRequestFactory()->get( (string)$url, $options, __METHOD__ );
if ( $raw === null ) {
wfDebugLog( 'torblock', "Got no reply or an invalid reply from $url.\n" );
return [];
}
$data = FormatJson::decode( $raw, true );
if ( !isset( $data['relays'] ) ) {
wfDebugLog( 'torblock', "Got no reply or an invalid reply from Onionoo.\n" );
return [];
}
$nodes = [];
foreach ( $data['relays'] as $relay ) {
$addresses = $relay['or_addresses'];
if ( isset( $relay['exit_addresses'] ) ) {
$addresses = array_merge( $addresses, $relay['exit_addresses'] );
}
foreach ( $addresses as $ip ) {
// Trim the port if it has one.
$portPosition = strrpos( $ip, ':' );
if ( $portPosition !== false ) {
$ip = substr( $ip, 0, $portPosition );
}
// Trim surrounding brackets for IPv6 addresses.
$hasBrackets = $ip[0] == '[';
if ( $hasBrackets ) {
$ip = substr( $ip, 1, -1 );
}
if ( !IPUtils::isValid( $ip ) ) {
wfDebug( 'Invalid IP address in Onionoo response.' );
continue;
}
$nodes[IPUtils::sanitizeIP( $ip )] = true;
}
}
return array_keys( $nodes );
}
}

File Metadata

Mime Type
text/x-php
Expires
Aug 15 2026, 18:56 (12 w, 3 d ago)
Storage Engine
local-disk
Storage Format
Raw Data
Storage Handle
cd/dd/58c33b73c7c6e8cac5bae2db96ec
Default Alt Text
TorExitNodes.php (6 KB)

Event Timeline