github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-11-19 18:54:23 +03:00
Code Issues Packages Projects Releases Wiki Activity

Adds new method for rule merge

Browse Source 
IMPORTANT: SecDefaultAction specified on a child configuration will
overwrite the ones specified on the parent; Previously it was
concatenating.
This commit is contained in:
Felipe Zimmerle
2020-04-14 11:33:17 -03:00
parent 73c3731c9d
commit 1518015687
114 changed files with 2130 additions and 1511 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
test/test-cases/regression/issue-1844.json
View File

@@ -37,10 +37,12 @@
]
},
"expected":{
"error_log":"line \"29\""
"error_log":"line \"29\"",
"http_code": 403
},
"rules":[
"SecRuleEngine On",
"SecDefaultAction \"phase:request,deny\"",
"SecRule WEBAPPID \"@contains test1\" \"id:1,phase:3,pass,t:trim\"",
"Include test-cases/data/big-file.conf"
]
@@ -129,10 +131,12 @@
]
},
"expected":{
"error_log":"line \"84\""
"error_log":"line \"84\"",
"http_code": 403
},
"rules":[
"SecRuleEngine On",
"SecDefaultAction \"phase:request,deny\"",
"SecRule WEBAPPID \"@contains test3\" \"id:1,phase:3,pass,t:trim\"",
"Include test-cases/data/big-file.conf"
]
@@ -175,11 +179,13 @@
]
},
"expected":{
"error_log":"line \"116\""
"error_log":"line \"116\"",
"http_code":403
},
"rules":[
"SecRuleEngine On",
"SecRule WEBAPPID \"@contains test3\" \"id:1,phase:3,pass,t:trim\"",
"SecDefaultAction \"phase:request,deny\"",
"SecRule WEBAPPID \"@contains test3\" \"id:1,phase:3,deny,t:trim\"",
"Include test-cases/data/big-file.conf"
]
},
@@ -221,10 +227,12 @@
]
},
"expected":{
"error_log":"line \"174\""
"error_log":"line \"174\"",
"http_code":403
},
"rules":[
"SecRuleEngine On",
"SecDefaultAction \"phase:request,deny\"",
"SecRule WEBAPPID \"@contains test3\" \"id:1,phase:3,pass,t:trim\"",
"Include test-cases/data/big-file.conf"
]
@@ -267,10 +275,12 @@
]
},
"expected":{
"error_log":"line \"174\""
"error_log":"line \"174\"",
"http_code":403
},
"rules":[
"SecRuleEngine On",
"SecDefaultAction \"phase:request,deny\"",
"SecRule WEBAPPID \"@contains test3\" \"id:1,phase:3,pass,t:trim\"",
"Include test-cases/data/not-so-big-file.conf"
]