github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-13 21:36:00 +03:00
Code Issues Packages Projects Releases Wiki Activity

Update CHANGES retroactively

Browse Source
This commit is contained in:
ivanr 2009-12-12 14:20:22 +00:00
parent 6a29308202
commit 62f7e68234
1 changed files with 21 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
CHANGES
View File

@ -1,6 +1,25 @@
21 Oct 2009 - trunk
12 Dec 2009 - trunk
-------------------
* Added the URLENCODED_ERROR flag, which is raised whenever invalid URL
encoding is encountered in the query string or in the request body
(but only if URLENCODED request body processor is used). [Ivan Ristic]
* Removed the obsolete PDF UXSS functionality. [Ivan Ristic]
* Renamed normalisePath to normalizePath and normalisePathWin to
normalizePathWin. Kept the previous names for backward compatibility.
[Ivan Ristic]
* Moved phase 1 to be run in the same Apache hook as phase 2. This means
that you can now have phase 1 rules in <Location> tags and, more
importantly, override server configuration in <Location> and others.
[Ivan Ristic]
* Renamed the sanitise family of actiont to sanitize. Kept the old variants
for backward compatibility. [Ivan Ristic]
* Do not escape quotes in macro resolution and only escape NUL in setenv
values.
@ -28,7 +47,7 @@
* Moved output filter to run before other stock filters (mod_deflate,
mod_cache, mod_expires, mod_filter) to avoid analyzing modified data
in the response. Patch originally submitted by Ivan Ristic.
in the response. Patch originally submitted by Ivan Ristic.
18 Sep 2009 - 2.5.10