mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-08-15 23:55:03 +03:00
Only calling server log if the message is not disruptive
The disruptive message is already part of the interception object
This commit is contained in:
parent
448897d297
commit
91daeee9f6
14
src/rule.cc
14
src/rule.cc
@ -741,8 +741,11 @@ bool Rule::evaluate(Transaction *trans,
|
|||||||
if (m_containsMultiMatchAction && isItToBeLogged) {
|
if (m_containsMultiMatchAction && isItToBeLogged) {
|
||||||
/* warn */
|
/* warn */
|
||||||
trans->m_rulesMessages.push_back(*ruleMessage);
|
trans->m_rulesMessages.push_back(*ruleMessage);
|
||||||
|
|
||||||
/* error */
|
/* error */
|
||||||
trans->serverLog(ruleMessage);
|
if (!ruleMessage->m_isDisruptive) {
|
||||||
|
trans->serverLog(ruleMessage);
|
||||||
|
}
|
||||||
|
|
||||||
RuleMessage *rm = new RuleMessage(this, trans);
|
RuleMessage *rm = new RuleMessage(this, trans);
|
||||||
rm->m_saveMessage = ruleMessage->m_saveMessage;
|
rm->m_saveMessage = ruleMessage->m_saveMessage;
|
||||||
@ -795,14 +798,19 @@ end_exec:
|
|||||||
&& !ruleMessage->m_message.empty()) {
|
&& !ruleMessage->m_message.empty()) {
|
||||||
/* warn */
|
/* warn */
|
||||||
trans->m_rulesMessages.push_back(*ruleMessage);
|
trans->m_rulesMessages.push_back(*ruleMessage);
|
||||||
|
|
||||||
/* error */
|
/* error */
|
||||||
trans->serverLog(ruleMessage);
|
if (!ruleMessage->m_isDisruptive) {
|
||||||
|
trans->serverLog(ruleMessage);
|
||||||
|
}
|
||||||
}
|
}
|
||||||
else if (m_containsStaticBlockAction && !m_containsMultiMatchAction) {
|
else if (m_containsStaticBlockAction && !m_containsMultiMatchAction) {
|
||||||
/* warn */
|
/* warn */
|
||||||
trans->m_rulesMessages.push_back(*ruleMessage);
|
trans->m_rulesMessages.push_back(*ruleMessage);
|
||||||
/* error */
|
/* error */
|
||||||
trans->serverLog(ruleMessage);
|
if (!ruleMessage->m_isDisruptive) {
|
||||||
|
trans->serverLog(ruleMessage);
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
return true;
|
return true;
|
||||||
|
Loading…
x
Reference in New Issue
Block a user