github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-09-30 03:34:29 +03:00
Code Issues Packages Projects Releases Wiki Activity

Adds support to rules with actions without quotes

Browse Source
This commit is contained in:
Felipe Zimmerle
2015-10-01 14:55:55 -03:00
parent 0087a602f1
commit 941b9e75c4
2 changed files with 52 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
src/parser/seclang-parser.yy
View File

@@ -248,6 +248,7 @@ using ModSecurity::Variables::Variable;
%type <std::vector<Variable *> *> variables
%type <Variable *> var
%type <Action *> act
%type <std::vector<Action *> *> actings
%printer { yyoutput << $$; } <*>;
%%
@@ -336,10 +337,24 @@ audit_log:
}
;
actings:
QUOTATION_MARK actions SPACE QUOTATION_MARK
{
$$ = $2;
}
| QUOTATION_MARK actions QUOTATION_MARK
{
$$ = $2;
}
| actions
{
$$ = $1;
}
;
expression:
audit_log
| DIRECTIVE SPACE variables SPACE OPERATOR SPACE QUOTATION_MARK actions SPACE QUOTATION_MARK
| DIRECTIVE SPACE variables SPACE OPERATOR SPACE QUOTATION_MARK actions QUOTATION_MARK
| DIRECTIVE SPACE variables SPACE OPERATOR SPACE actings
{
Operator *op = Operator::instantiate($5);
const char *error = NULL;
@@ -350,15 +365,14 @@ expression:
Rule *rule = new Rule(
/* op */ op,
/* variables */ $3,
/* actions */ $8
/* actions */ $7
);
if (driver.addSecRule(rule) == false) {
YYERROR;
}
}
| DIRECTIVE SPACE variables SPACE FREE_TEXT SPACE QUOTATION_MARK actions SPACE QUOTATION_MARK
| DIRECTIVE SPACE variables SPACE FREE_TEXT SPACE QUOTATION_MARK actions QUOTATION_MARK
| DIRECTIVE SPACE variables SPACE FREE_TEXT SPACE actings
{
Operator *op = Operator::instantiate("\"@rx " + $5 + "\"");
const char *error = NULL;
@@ -369,7 +383,25 @@ expression:
Rule *rule = new Rule(
/* op */ op,
/* variables */ $3,
/* actions */ $8
/* actions */ $7
);
if (driver.addSecRule(rule) == false) {
YYERROR;
}
}
| DIRECTIVE SPACE variables SPACE OPERATOR
{
Operator *op = Operator::instantiate("\"@rx " + $5 + "\"");
const char *error = NULL;
if (op->init(&error) == false) {
driver.error(@0, error);
YYERROR;
}
Rule *rule = new Rule(
/* op */ op,
/* variables */ $3,
/* actions */ NULL
);
if (driver.addSecRule(rule) == false) {