From 2bdc5f9d0a0c2fddeb890842238ca18287d40ad6 Mon Sep 17 00:00:00 2001 From: Felipe Zimmerle Date: Tue, 18 Jun 2019 15:10:43 -0300 Subject: [PATCH] Adds test case to cover issue #2005 --- .../config-update-action-by-id.json | 45 +++++++++++++++++++ 1 file changed, 45 insertions(+) diff --git a/test/test-cases/regression/config-update-action-by-id.json b/test/test-cases/regression/config-update-action-by-id.json index 75ad3af5..4e1a3fc2 100644 --- a/test/test-cases/regression/config-update-action-by-id.json +++ b/test/test-cases/regression/config-update-action-by-id.json @@ -222,6 +222,51 @@ "SecRule ARGS \"@contains value1\" \"phase:3,id:200004,block\"", "SecRule ARGS \"@contains value1\" \"phase:3,id:200005,log\"" ] + }, + { + "enabled":1, + "version_min":300000, + "title":"SecRuleUpdateActionById (6/n)", + "issue":"2005", + "client":{ + "ip":"200.249.12.31", + "port":123 + }, + "server":{ + "ip":"200.249.12.31", + "port":80 + }, + "request":{ + "headers":{ + "Host":"localhost", + "User-Agent":"curl/7.38.0", + "Accept":"*/*", + "Content-Length":"330", + "Content-Type":"application/lhebs", + "Expect":"100-continue" + }, + "uri":"/a=urlencoded?param1=value1", + "method":"GET" + }, + "response":{ + "headers":{ + "Date":"Mon, 13 Jul 2015 20:02:41 GMT", + "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", + "Content-Type":"text/html" + }, + "body":[ + "no need." + ] + }, + "expected":{ + "http_code": 302, + "error_log": "Access denied with code 302" + }, + "rules":[ + "SecRuleEngine On", + "SecRuleUpdateActionById 200004 \"redirect:'https://%{request_headers.host}/'\"", + "SecRule ARGS \"@contains value1\" \"phase:3,id:200004,block,deny\"" + ] } ]