mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-08-14 13:56:01 +03:00
Update CHANGES retroactively
This commit is contained in:
parent
6a29308202
commit
62f7e68234
21
CHANGES
21
CHANGES
@ -1,6 +1,25 @@
|
|||||||
21 Oct 2009 - trunk
|
|
||||||
|
12 Dec 2009 - trunk
|
||||||
-------------------
|
-------------------
|
||||||
|
|
||||||
|
* Added the URLENCODED_ERROR flag, which is raised whenever invalid URL
|
||||||
|
encoding is encountered in the query string or in the request body
|
||||||
|
(but only if URLENCODED request body processor is used). [Ivan Ristic]
|
||||||
|
|
||||||
|
* Removed the obsolete PDF UXSS functionality. [Ivan Ristic]
|
||||||
|
|
||||||
|
* Renamed normalisePath to normalizePath and normalisePathWin to
|
||||||
|
normalizePathWin. Kept the previous names for backward compatibility.
|
||||||
|
[Ivan Ristic]
|
||||||
|
|
||||||
|
* Moved phase 1 to be run in the same Apache hook as phase 2. This means
|
||||||
|
that you can now have phase 1 rules in <Location> tags and, more
|
||||||
|
importantly, override server configuration in <Location> and others.
|
||||||
|
[Ivan Ristic]
|
||||||
|
|
||||||
|
* Renamed the sanitise family of actiont to sanitize. Kept the old variants
|
||||||
|
for backward compatibility. [Ivan Ristic]
|
||||||
|
|
||||||
* Do not escape quotes in macro resolution and only escape NUL in setenv
|
* Do not escape quotes in macro resolution and only escape NUL in setenv
|
||||||
values.
|
values.
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user