From 35636674e33c23acc36d96299eefe6b1b26357d7 Mon Sep 17 00:00:00 2001 From: Felipe Zimmerle Date: Wed, 11 May 2016 20:36:47 -0300 Subject: [PATCH] Adds the missing regression tests for USERID --- test/test-cases/regression/action-setuid.json | 37 ++++++++++ .../regression/variable-USERID.json | 69 +++++++++++++++++++ 2 files changed, 106 insertions(+) create mode 100644 test/test-cases/regression/action-setuid.json create mode 100644 test/test-cases/regression/variable-USERID.json diff --git a/test/test-cases/regression/action-setuid.json b/test/test-cases/regression/action-setuid.json new file mode 100644 index 00000000..52aaacc0 --- /dev/null +++ b/test/test-cases/regression/action-setuid.json @@ -0,0 +1,37 @@ +[ + { + "enabled":1, + "version_min":300000, + "title":"Testing setuid action", + "expected":{ + "debug_log": "Saving variable: USER:score with value: 5" + }, + "client":{ + "ip":"200.249.12.31", + "port":123 + }, + "request":{ + "headers":{ + "Host":"localhost", + "User-Agent":"curl/7.38.0", + "Accept":"*/*", + "User-Agent":"My sweet little browser", + "Cookie": "PHPSESSID=rAAAAAAA2t5uvjq435r4q7ib3vtdjq120" + }, + "uri":"/?key=value&key=other_value", + "method":"GET" + }, + "server":{ + "ip":"200.249.12.31", + "port":80 + }, + "rules":[ + "SecRuleEngine On", + "SecDebugLog \/tmp\/modsec_debug.log", + "SecRule REQUEST_HEADERS:User-Agent \"^(.*)$\" \"id:'900018',phase:1,t:none,t:sha1,t:hexEncode,setuid:%{REQUEST_COOKIES:USER}%,nolog,pass\"", + "SecRule REQUEST_HEADERS \".*\" \"id:'900021',phase:1,setvar:USER.score=+10\"", + "SecRule REQUEST_HEADERS:User-Agent \"^(.*)$\" \"id:'900068',phase:1,t:none,t:sha1,t:hexEncode,setsid:%{REQUEST_COOKIES:PHPSESSID}2,nolog,pass\"", + "SecRule REQUEST_HEADERS \".*\" \"id:'900022',phase:1,setvar:USER.score=+5\"" + ] + } +] \ No newline at end of file diff --git a/test/test-cases/regression/variable-USERID.json b/test/test-cases/regression/variable-USERID.json new file mode 100644 index 00000000..af38cca1 --- /dev/null +++ b/test/test-cases/regression/variable-USERID.json @@ -0,0 +1,69 @@ +[ + { + "enabled":1, + "version_min":300000, + "title":"Testing USERID variable (1/2)", + "expected":{ + "debug_log": "Target value: \"zimmerle2\"" + }, + "client":{ + "ip":"200.249.12.31", + "port":123 + }, + "request":{ + "headers":{ + "Host":"localhost", + "User-Agent":"curl/7.38.0", + "Accept":"*/*", + "User-Agent":"My sweet little browser", + "Cookie": "USER=zimmerle" + }, + "uri":"/?key=value&key=other_value", + "method":"GET" + }, + "server":{ + "ip":"200.249.12.31", + "port":80 + }, + "rules":[ + "SecRuleEngine On", + "SecDebugLog \/tmp\/modsec_debug.log", + "SecRule REQUEST_HEADERS:User-Agent \"^(.*)$\" \"id:'900018',phase:1,t:none,t:sha1,t:hexEncode,setuid:%{REQUEST_COOKIES:USER}%,nolog,pass\"", + "SecRule REQUEST_HEADERS:User-Agent \"^(.*)$\" \"id:'900068',phase:1,t:none,t:sha1,t:hexEncode,setuid:%{REQUEST_COOKIES:USER}2,nolog,pass\"", + "SecRule USERID \".*\" \"id:1239,phase:1,log,pass\"" + ] + }, + { + "enabled":1, + "version_min":300000, + "title":"Testing USERID variable (2/2)", + "expected":{ + "debug_log": "Target value: \"whee\"" + }, + "client":{ + "ip":"200.249.12.31", + "port":123 + }, + "request":{ + "headers":{ + "Host":"localhost", + "User-Agent":"curl/7.38.0", + "Accept":"*/*", + "User-Agent":"My sweet little browser", + "Cookie": "USER=whee" + }, + "uri":"/?key=value&key=other_value", + "method":"GET" + }, + "server":{ + "ip":"200.249.12.31", + "port":80 + }, + "rules":[ + "SecRuleEngine On", + "SecDebugLog \/tmp\/modsec_debug.log", + "SecRule REQUEST_HEADERS:User-Agent \"^(.*)$\" \"id:'900018',phase:1,t:none,t:sha1,t:hexEncode,setuid:%{REQUEST_COOKIES:USER}%,nolog,pass\"", + "SecRule USERID \".*\" \"id:1239,phase:1,log,pass\"" + ] + } +] \ No newline at end of file