github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-13 21:36:00 +03:00
Code Issues Packages Projects Releases Wiki Activity

Remove query string from error log. See #447.

Browse Source
This commit is contained in:
brectanus 2008-01-23 18:12:59 +00:00
parent e0c0d66906
commit 9dbc7807d9
2 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
CHANGES
View File

@ -1,6 +1,9 @@
21 Jan 2008 - 2.5.0-rc2
23 Jan 2008 - 2.5.0-rc2
-----------------------
* No longer log the query portion of the URI in the error log as
it may contain sensitive data.
* There are no longer any default transformations performed.
* Implemented SecRuleUpdateActionById.

2
apache2/apache2_util.c
View File

@ -276,7 +276,7 @@ void internal_log(request_rec *r, directory_config *dcfg, modsec_rec *msr,
ap_log_error(APLOG_MARK, APLOG_ERR | APLOG_NOERRNO, 0, r->server,
"[client %s] ModSecurity: %s%s [uri \"%s\"]%s", r->connection->remote_ip, str1,
hostname, log_escape(msr->mp, r->unparsed_uri), unique_id);
hostname, log_escape(msr->mp, r->uri), unique_id);
/* Add this message to the list. */
if (msr != NULL) {