github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-14 05:45:59 +03:00
Code Issues Packages Projects Releases Wiki Activity

Using real server signature on status call

Browse Source 
On Apache platform the server signature can be replaced using the
SecServerSignature directive. Status call was using the signature informed by
this directive instead of using the original one. As reported at #702.
This commit is contained in:
Felipe Zimmerle 2014-11-03 19:27:06 -08:00
parent 8305600d50
commit 59a1746be7
3 changed files with 3 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
apache2/mod_security2.c
View File

@ -54,7 +54,7 @@ char DSOLOCAL *chroot_dir = NULL;
char DSOLOCAL *new_server_signature = NULL;
static char *real_server_signature = NULL;
char DSOLOCAL *real_server_signature = NULL;
char DSOLOCAL *guardianlog_name = NULL;

1
apache2/modsecurity.h
View File

@ -133,6 +133,7 @@ typedef struct msc_parm msc_parm;
#define FATAL_ERROR "ModSecurity: Fatal error (memory allocation or unexpected internal error)!"
extern DSOLOCAL char *new_server_signature;
extern DSOLOCAL char *real_server_signature;
extern DSOLOCAL char *chroot_dir;
extern module AP_MODULE_DECLARE_DATA security2_module;

6
apache2/msc_status_engine.c
View File

@ -349,11 +349,7 @@ int DSOLOCAL msc_beacon_string (char *beacon_string, int beacon_string_max_len)
#endif
libxml = LIBXML_DOTTED_VERSION;
modsec = MODSEC_VERSION;
#ifdef WIN32
apache = "IIS";
#else
apache = apache_get_server_version();
#endif
apache = real_server_signature;
/* 6 represents: strlen("(null)") */
beacon_string_len = (modsec ? strlen(modsec) : 6) +