github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-09-29 19:24:29 +03:00
Code Issues Packages Projects Releases Wiki Activity

Adds support 'xmlns' action to the libmodsec parser

Browse Source
This commit is contained in:
Felipe Zimmerle
2016-05-16 18:24:10 -03:00
parent 3e8defb853
commit 1b88947d9b
6 changed files with 166 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
test/test-cases/regression/action-xmlns.json Normal file
View File

@@ -0,0 +1,38 @@
[
{
"enabled":1,
"version_min":300000,
"title":"Testing action :: XMLNS (parser error 1)",
"expected":{
"parser_error": "XMLS: Bad format, missing equals sign"
},
"rules":[
"SecRule REQUEST_HEADERS:Content-Type \"^text/xml$\" \"id:500008,phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML\"",
"SecRule REQUEST_HEADERS:User-Agent \"^(.*)$\" \"id:123,xmlns:soap'http://schemas.xmlsoap.org/soap/envelope/'\""
]
},
{
"enabled":1,
"version_min":300000,
"title":"Testing action :: XMLNS (parser error 2)",
"expected":{
"parser_error": "XMLS: XMLNS is invalid. Expecting a name=value format."
},
"rules":[
"SecRule REQUEST_HEADERS:Content-Type \"^text/xml$\" \"id:500008,phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML\"",
"SecRule REQUEST_HEADERS:User-Agent \"^(.*)$\" \"id:123,xmlns:=\""
]
},
{
"enabled":1,
"version_min":300000,
"title":"Testing action :: XMLNS (parser error 3)",
"expected":{
"parser_error": "XMLS: Missing xmlns href for prefix: `schemas.xmlsoap.org/soap/envelope/'."
},
"rules":[
"SecRule REQUEST_HEADERS:Content-Type \"^text/xml$\" \"id:500008,phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML\"",
"SecRule REQUEST_HEADERS:User-Agent \"^(.*)$\" \"id:123,xmlns:soap='schemas.xmlsoap.org/soap/envelope/'\""
]
}
]