diff --git a/CHANGES b/CHANGES index 274aad9f..1e8f14df 100644 --- a/CHANGES +++ b/CHANGES @@ -1,6 +1,8 @@ v3.0.3 - YYYY-MMM-DD (to be released) ------------------------------------- + - Fix SecResponseBodyAccess and ctl:requestBodyAccess directives + [Issue #1531 - @victorhora, @defanator] - Fix OpenBSD build [Issue #1841 - @victorhora, @zimmerle, @juanfra684] - Fix parser to support GeoLookup with MaxMind diff --git a/src/transaction.cc b/src/transaction.cc index 4e3fdc79..1bba7e35 100644 --- a/src/transaction.cc +++ b/src/transaction.cc @@ -766,7 +766,7 @@ int Transaction::processRequestBody() { m_variableReqbodyProcessorError.set("0", m_variableOffset); } - if (m_rules->m_secRequestBodyAccess != RulesProperties::TrueConfigBoolean) { + if (m_rules->m_secRequestBodyAccess == RulesProperties::FalseConfigBoolean) { if (m_requestBodyAccess != RulesProperties::TrueConfigBoolean) { #ifndef NO_LOGS debug(4, "Request body processing is disabled"); diff --git a/test/test-cases/regression/action-ctl_request_body_access.json b/test/test-cases/regression/action-ctl_request_body_access.json index b299d1ac..a7eed77f 100644 --- a/test/test-cases/regression/action-ctl_request_body_access.json +++ b/test/test-cases/regression/action-ctl_request_body_access.json @@ -51,7 +51,7 @@ ] }, "expected":{ - "debug_log":"Request body processing is enabled, but disable to this transaction due to ctl:requestBodyAccess action" + "debug_log":"Request body processing is enabled, but disabled to this transaction due to ctl:requestBodyAccess action" }, "rules":[ "SecRuleEngine On",