github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-09-29 19:24:29 +03:00
Code Issues Packages Projects Releases Wiki Activity

Added @within string comparison operator with support for macro expansion. See #134.

Browse Source
This commit is contained in:
brectanus
2007-06-21 02:21:06 +00:00
parent b58efb3466
commit 19887f9cc6
3 changed files with 91 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
doc/modsecurity2-apache-reference.xml
View File

@@ -4649,5 +4649,23 @@ SecRule XML "<emphasis role="bold">@validateSchema /path/to/apache2/conf/xml.xsd
</listitem>
</itemizedlist>
</section>
<section>
<title><literal>within</literal></title>
<para><emphasis role="bold">Description: </emphasis>This operator is a
string comparison similar to <literal>@contains</literal>, except that
the target and match values are reversed. It returns true if the input
value is found anywhere within the parameter value. Macro expansion is
performed so you may use variable names such as %{TX.1}, etc.</para>
<para>Example:</para>
<programlisting format="linespecific">SecRule REQUEST_METHOD "!<emphasis
role="bold">@within get,post,head</emphasis>" t:lowercase,deny,status:403
SecAction "pass,setvar:'tx.allowed_methods=get,post,head'"
SecRule REQUEST_METHOD "!<emphasis role="bold">@within %{tx.allowed_methods}</emphasis>" t:lowercase,deny,status:403</programlisting>
</section>
</section>
</article>