<!DOCTYPE html>
<html lang="zh-CN">
  <head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
    <title>访问请求已被拦截</title>
    <style>:root{--bg-1:#0b1220;--bg-2:#111b31;--panel:rgba(15,23,42,0.82);--panel-border:rgba(148,163,184,0.18);--text-main:#e5eefc;--text-sub:#94a3b8;--danger:#f43f5e;--danger-soft:rgba(244,63,94,0.14);--warn:#f59e0b;--success:#22c55e;--line:rgba(148,163,184,0.14);--shadow:0 20px 60px rgba(2,6,23,0.45);--radius:24px;--radius-sm:16px;--max-width:1100px}*{box-sizing:border-box}html,body{margin:0;padding:0;min-height:100%;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI","PingFang SC","Hiragino Sans GB","Microsoft YaHei","Noto Sans SC",sans-serif;color:var(--text-main);background:radial-gradient(circle at top left,rgba(59,130,246,0.18),transparent 28%),radial-gradient(circle at right center,rgba(244,63,94,0.14),transparent 25%),linear-gradient(135deg,var(--bg-1) 0%,var(--bg-2) 100%)}body{display:flex;align-items:center;justify-content:center;padding:max(20px,env(safe-area-inset-top)) max(16px,env(safe-area-inset-right))          max(20px,env(safe-area-inset-bottom)) max(16px,env(safe-area-inset-left))}.glow{position:fixed;inset:0;overflow:hidden;pointer-events:none}.glow::before,.glow::after{content:"";position:absolute;border-radius:999px;filter:blur(80px);opacity:0.5}.glow::before{width:240px;height:240px;background:rgba(37,99,235,0.24);top:8%;left:6%}.glow::after{width:260px;height:260px;background:rgba(244,63,94,0.18);right:8%;bottom:6%}.shell{width:100%;max-width:var(--max-width);position:relative;z-index:1}.card{background:var(--panel);border:1px solid var(--panel-border);border-radius:var(--radius);box-shadow:var(--shadow);backdrop-filter:blur(14px);-webkit-backdrop-filter:blur(14px);overflow:hidden}.topbar{display:flex;justify-content:space-between;align-items:center;gap:16px;padding:18px 24px;border-bottom:1px solid var(--line);background:linear-gradient(180deg,rgba(255,255,255,0.03),rgba(255,255,255,0))}.brand{display:flex;align-items:center;gap:12px;min-width:0}.brand-mark{width:42px;height:42px;border-radius:14px;background:linear-gradient(135deg,#ef4444,#7f1d1d);display:grid;place-items:center;font-size:20px;box-shadow:inset 0 1px 0 rgba(255,255,255,0.15),0 10px 24px rgba(239,68,68,0.25);flex:0 0 auto}.brand-text{min-width:0}.brand-title{margin:0;font-size:16px;font-weight:700;letter-spacing:0.2px}.brand-subtitle{margin:4px 0 0;color:var(--text-sub);font-size:12px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.badge{flex:0 0 auto;display:inline-flex;align-items:center;gap:8px;padding:8px 12px;border-radius:999px;background:var(--danger-soft);border:1px solid rgba(244,63,94,0.24);color:#fecdd3;font-size:13px;font-weight:600}.badge-dot{width:8px;height:8px;border-radius:50%;background:var(--danger);box-shadow:0 0 0 6px rgba(244,63,94,0.15)}.main{display:grid;grid-template-columns:1.12fr 0.88fr;gap:0}.hero,.details{padding:34px}.hero{border-right:1px solid var(--line)}.icon-wrap{width:76px;height:76px;border-radius:22px;display:grid;place-items:center;margin-bottom:22px;background:linear-gradient(180deg,rgba(244,63,94,0.2),rgba(244,63,94,0.08));border:1px solid rgba(244,63,94,0.22);color:#fecaca}.hero h1{margin:0;font-size:clamp(28px,4vw,42px);line-height:1.15;letter-spacing:-0.02em}.hero p.lead{margin:16px 0 0;color:#cbd5e1;font-size:clamp(15px,2vw,17px);line-height:1.8;max-width:56ch}.highlights{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:14px;margin-top:28px}.pill{padding:14px 16px;border-radius:18px;background:rgba(255,255,255,0.03);border:1px solid var(--line)}.pill b{display:block;font-size:14px;margin-bottom:6px}.pill span{display:block;color:var(--text-sub);font-size:12px;line-height:1.6}.actions{display:flex;flex-wrap:wrap;gap:12px;margin-top:28px}.btn{appearance:none;border:0;outline:none;cursor:pointer;border-radius:14px;padding:13px 18px;font-size:14px;font-weight:700;transition:transform 0.2s ease,box-shadow 0.2s ease,background 0.2s ease}.btn:hover{transform:translateY(-1px)}.btn-primary{background:linear-gradient(135deg,#2563eb,#1d4ed8);color:#fff;box-shadow:0 12px 28px rgba(37,99,235,0.24)}.btn-secondary{background:rgba(255,255,255,0.04);color:var(--text-main);border:1px solid var(--line)}.section-title{display:flex;align-items:center;gap:10px;font-size:16px;font-weight:700;margin:0 0 18px}.section-title small{font-size:12px;color:var(--text-sub);font-weight:500}.info-panel{border-radius:18px;border:1px solid var(--line);background:rgba(255,255,255,0.03);overflow:hidden}.row{display:grid;grid-template-columns:112px 1fr;gap:12px;padding:14px 16px;border-bottom:1px solid var(--line);align-items:start}.row:last-child{border-bottom:0}.label{color:var(--text-sub);font-size:13px}.value{color:var(--text-main);font-size:14px;line-height:1.7;word-break:break-word}.tips{margin-top:18px;border-radius:18px;border:1px solid rgba(245,158,11,0.2);background:rgba(245,158,11,0.08);padding:14px 16px}.tips h3{margin:0 0 8px;font-size:14px;color:#fde68a}.tips ul{margin:0;padding-left:18px;color:#f8fafc}.tips li{margin:6px 0;line-height:1.7;color:#dbeafe;font-size:13px}.footer{display:flex;justify-content:space-between;align-items:center;gap:14px;padding:14px 24px 18px;border-top:1px solid var(--line);color:var(--text-sub);font-size:12px}.footer strong{color:#cbd5e1}.mono{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}@media (max-width:980px){.main{grid-template-columns:1fr}.hero{border-right:0;border-bottom:1px solid var(--line)}}@media (max-width:720px){.topbar,.hero,.details,.footer{padding-left:18px;padding-right:18px}.topbar{align-items:flex-start;flex-direction:column}.highlights{grid-template-columns:1fr}.row{grid-template-columns:1fr;gap:6px}.footer{flex-direction:column;align-items:flex-start}}@media (max-width:420px){.hero,.details{padding-top:24px;padding-bottom:24px}.hero h1{font-size:26px}.btn{width:100%;justify-content:center}}</style>
  </head>
  <body>
    <div class="glow"></div>

    <main class="shell">
      <section class="card" aria-label="WAF 拦截页面">
        <header class="topbar">
          <div class="brand">
            <div class="brand-mark" aria-hidden="true">🛡</div>
            <div class="brand-text">
              <h2 class="brand-title">Web 应用防护系统（WAF）</h2>
              <p class="brand-subtitle">当前请求触发安全策略，系统已自动进行访问拦截</p>
            </div>
          </div>
          <div class="badge" aria-label="拦截状态">
            <span class="badge-dot"></span>
            <span>已拦截</span>
          </div>
        </header>

        <div class="main">
          <section class="hero">
            <div class="icon-wrap" aria-hidden="true">
              <svg width="34" height="34" viewBox="0 0 24 24" fill="none">
                <path d="M12 2L4 5V11C4 16.5 7.4 21.6 12 23C16.6 21.6 20 16.5 20 11V5L12 2Z" stroke="currentColor" stroke-width="1.8" stroke-linejoin="round"/>
                <path d="M9.2 12.2L11 14L15.3 9.7" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"/>
              </svg>
            </div>

            <h1>访问请求存在风险，已被安全策略阻断</h1>
            <p class="lead">
              为保障站点稳定运行与业务数据安全，当前访问请求已被 Web 应用防护系统识别并拦截。
              这通常与请求参数异常、访问频率过高、命中防护规则或来源环境风险有关。
            </p>

            <div class="highlights">
              <div class="pill">
                <b>防护类型</b>
                <span>SQL 注入 / XSS / 扫描探测 / CC 攻击识别</span>
              </div>
              <div class="pill">
                <b>处理结果</b>
                <span>本次请求已终止，未进入业务应用层</span>
              </div>
              <div class="pill">
                <b>建议动作</b>
                <span>检查请求内容、浏览器环境及代理网络配置</span>
              </div>
            </div>

            <div class="actions">
              <button class="btn btn-primary" onclick="window.location.reload()">刷新后重试</button>
              <button class="btn btn-secondary" onclick="copyInfo()">复制诊断信息</button>
            </div>
          </section>

          <aside class="details">
            <h2 class="section-title">
              诊断信息
              <small>可提供给网站管理员或运维人员排查</small>
            </h2>

            <div class="info-panel">
              <div class="row">
                <div class="label">拦截时间</div>
                <div class="value" id="timeText">--</div>
              </div>
              <div class="row">
                <div class="label">访问页面</div>
                <div class="value mono" id="urlText">--</div>
              </div>
              <div class="row">
                <div class="label">客户端 IP</div>
                <div class="value mono">获取失败或未透出</div>
              </div>
              <div class="row">
                <div class="label">事件编号</div>
                <div class="value mono" id="eventId">--</div>
              </div>
              <div class="row">
                <div class="label">拦截原因</div>
                <div class="value">命中访问控制策略，请求存在异常特征</div>
              </div>
              <div class="row">
                <div class="label">状态码</div>
                <div class="value mono">403 Forbidden</div>
              </div>
            </div>

            <div class="tips">
              <h3>处理建议</h3>
              <ul>
                <li>请勿重复高频刷新、批量提交或携带异常参数访问。</li>
                <li>如使用代理、VPN、抓包插件或自动化工具，建议关闭后再次尝试。</li>
                <li>若确认访问正常，请将“事件编号”和访问时间反馈给管理员进行白名单核查。</li>
              </ul>
            </div>
          </aside>
        </div>

        <footer class="footer">
          <div>安全状态：<strong>WAF Protection Enabled</strong></div>
        </footer>
      </section>
    </main>

    <script>
      function formatDate(date) {
        const pad = (n) => String(n).padStart(2, '0');
        return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())} ${pad(date.getHours())}:${pad(date.getMinutes())}:${pad(date.getSeconds())}`;
      }

      function createEventId() {
        const seed = Date.now().toString(36).toUpperCase();
        const rand = Math.random().toString(36).slice(2, 8).toUpperCase();
        return `WAF-${seed}-${rand}`;
      }

      function copyInfo() {
        const payload = [
          `拦截时间：${document.getElementById('timeText').innerText}`,
          `访问页面：${document.getElementById('urlText').innerText}`,
          `事件编号：${document.getElementById('eventId').innerText}`,
          `状态码：403 Forbidden`,
          `拦截原因：命中访问控制策略，请求存在异常特征`
        ].join('\n');

        if (navigator.clipboard && navigator.clipboard.writeText) {
          navigator.clipboard.writeText(payload).then(() => {
            alert('诊断信息已复制');
          }).catch(() => {
            fallbackCopy(payload);
          });
        } else {
          fallbackCopy(payload);
        }
      }

      function fallbackCopy(text) {
        const textarea = document.createElement('textarea');
        textarea.value = text;
        textarea.style.position = 'fixed';
        textarea.style.opacity = '0';
        document.body.appendChild(textarea);
        textarea.select();
        try {
          document.execCommand('copy');
          alert('诊断信息已复制');
        } catch (e) {
          alert('复制失败，请手动复制页面信息');
        }
        document.body.removeChild(textarea);
      }

      document.getElementById('timeText').innerText = formatDate(new Date());
      document.getElementById('urlText').innerText = window.location.href;
      document.getElementById('eventId').innerText = createEventId();
    </script>
  </body>
</html>
