Merge pull request #666 from derhansen/master

Uses code 400 instead of 44 in modsecurity.conf-recommended
This commit is contained in:
Felipe Zimmerle 2014-03-03 21:42:40 -02:00 committed by Felipe Zimmerle
commit a0ed3dbbe2
2 changed files with 2 additions and 2 deletions

View File

@ -78,7 +78,7 @@ FL %{MULTIPART_FILE_LIMIT_EXCEEDED}'"
# Did we see anything that might be a boundary?
#
SecRule MULTIPART_UNMATCHED_BOUNDARY "!@eq 0" \
"id:'200003',phase:2,t:none,log,deny,status:44,msg:'Multipart parser detected a possible unmatched boundary.'"
"id:'200003',phase:2,t:none,log,deny,msg:'Multipart parser detected a possible unmatched boundary.'"
# PCRE Tuning
# We want to avoid a potential RegEx DoS condition

View File

@ -59,7 +59,7 @@ SecRule REQBODY_ERROR "!@eq 0" \
# _not_ to remove it altogether.
#
SecRule MULTIPART_STRICT_ERROR "!@eq 0" \
"id:'200002',phase:2,t:none,log,deny,status:44, \
"id:'200002',phase:2,t:none,log,deny,status:400, \
msg:'Multipart request body failed strict validation: \
PE %{REQBODY_PROCESSOR_ERROR}, \
BQ %{MULTIPART_BOUNDARY_QUOTED}, \