github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-13 13:26:01 +03:00
Code Issues Packages Projects Releases Wiki Activity

Adds sanity check on SecRemoteRules directive input

Browse Source
This commit is contained in:
Felipe Zimmerle 2017-06-21 19:06:58 -07:00
parent 3d425997df
commit 4b70c78fff
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/parser/seclang-scanner.ll
View File

@ -936,6 +936,10 @@ EQUALS_MINUS (?i:=\-)
std::string url;
std::vector<std::string> conf = modsecurity::utils::string::split(yytext, ' ');
if (conf.size() < 2) {
driver.error (*driver.loc.back(), "", "SecRemoteRules demands a key and a URI");
throw p::syntax_error(*driver.loc.back(), "");
}
key = conf[1];
url = conf[2];
c.setKey(key);