diff --git a/CHANGES b/CHANGES
index d8f1604a..f1c004df 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,15 @@
+23 Jul 2012 - 2.6.7
+-------------------
+
+ * Fixed PCRE mismtach version warning message (Thanks Victor Julien).
+
+ * Fixed explicit target replacement using SecUpdateTargetById was broken.
+
+ * The ctl:ruleUpdateTargetById is deprecated and will be removed for future versions since
+ there is no safe way to use it per-request.
+
+ * Added ctl:ruleRemoveTargetById that can be used to exclude targets to be processed per-request.
+
22 Jun 2012 - 2.7.0-rc2
-------------------
diff --git a/doc/Reference_Manual.html b/doc/Reference_Manual.html
index c7a72c24..ba98326b 100644
--- a/doc/Reference_Manual.html
+++ b/doc/Reference_Manual.html
@@ -9,26 +9,30 @@ lang="en">
-
+
+
+
+href="https://sourceforge.net/apps/mediawiki/mod-security/index.php?title=Special:RecentChanges&feed=rss">
+href="https://sourceforge.net/apps/mediawiki/mod-security/index.php?title=Special:RecentChanges&feed=atom">
SourceForge.net: Reference Manual - mod-security
-
-
@@ -41,7 +45,7 @@ type="text/css">
var wgScript = "/apps/mediawiki/mod-security/index.php";
var wgVariantArticlePath = false;
var wgActionPaths = {};
- var wgServer = "http://sourceforge.net";
+ var wgServer = "https://sourceforge.net";
var wgCanonicalNamespace = "";
var wgCanonicalSpecialPageName = false;
var wgNamespaceNumber = 0;
@@ -50,12 +54,12 @@ type="text/css">
var wgAction = "view";
var wgArticleId = "12";
var wgIsArticle = true;
- var wgUserName = null;
- var wgUserGroups = null;
+ var wgUserName = "Brenosilva";
+ var wgUserGroups = ["admin", "editor", "*", "user", "autoconfirmed"];
var wgUserLanguage = "en";
var wgContentLanguage = "en";
var wgBreakFrames = false;
- var wgCurRevisionId = 502;
+ var wgCurRevisionId = 507;
var wgVersion = "1.15.1";
var wgEnableAPI = true;
var wgEnableWriteAPI = true;
@@ -63,11 +67,13 @@ type="text/css">
var wgDigitTransformTable = ["", ""];
var wgRestrictionEdit = [];
var wgRestrictionMove = [];
+ var wgAjaxWatch = {"watchMsg": "Watch", "unwatchMsg": "Unwatch", "watchingMsg": "Watching…", "unwatchingMsg": "Unwatching…"};
/*]]>*/
+
@@ -2604,6 +2610,9 @@ example, lets say you want to only inspect ARGS for a particular URL:
This ctl is deprecated and will be removed
+from the code, since we cannot use it per-transaction.
+
SecRuleUpdateTargetByMsg
Description: Updates the target (variable) list of the
@@ -2653,18 +2662,6 @@ target to the end of the variable list as follows:
"phase:2,rev:'2.1.1',capture,t:none,t:htmlEntityDecode,t:compressWhitespace,t:lowercase,ctl:auditLogParts=+E,block,msg:'System Command Injection',id:'958895',tag:'WEB_ATTACK/COMMAND_INJECTION',tag:'WASCTC/WASC-31',tag:'OWASP_TOP_10/A1',tag:'PCI/6.5.2',logdata:'%{TX.0}',severity:'2',setvar:'tx.msg=%{rule.msg}',setvar:tx.anomaly_score=+%{tx.critical_anomaly_score},setvar:tx.command_injection_score=+%{tx.critical_anomaly_score},setvar:tx.%{rule.id}-WEB_ATTACK/COMMAND_INJECTION-%{matched_var_name}=%
{tx.0}""
-
Conditionally Appending Targets
-
You could also do the same by using the ctl action. This is
-useful if you want to only update the targets for a particular URL
-
Description: Updates the target (variable) list of the
@@ -2714,18 +2711,6 @@ target to the end of the variable list as follows:
"phase:2,rev:'2.1.1',capture,t:none,t:htmlEntityDecode,t:compressWhitespace,t:lowercase,ctl:auditLogParts=+E,block,msg:'System Command Injection',id:'958895',tag:'WEB_ATTACK/COMMAND_INJECTION',tag:'WASCTC/WASC-31',tag:'OWASP_TOP_10/A1',tag:'PCI/6.5.2',logdata:'%{TX.0}',severity:'2',setvar:'tx.msg=%{rule.msg}',setvar:tx.anomaly_score=+%{tx.critical_anomaly_score},setvar:tx.command_injection_score=+%{tx.critical_anomaly_score},setvar:tx.%{rule.id}-WEB_ATTACK/COMMAND_INJECTION-%{matched_var_name}=%
{tx.0}""
-
Conditionally Appending Targets
-
You could also do the same by using the ctl action. This is
-useful if you want to only update the targets for a particular URL
-
@@ -4511,9 +4496,10 @@ SecRule REQUEST_CONTENT_TYPE ^text/xml "nolog,pass,ctl:requestBodyProcessor=XML"