github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-09-27 10:18:49 +03:00
Code Issues Packages Projects Releases Wiki Activity

Force case comparison when check previously added exclusion

Browse Source
This commit is contained in:
Ervin Hegedus 2025-09-16 15:10:51 +02:00
parent 98b0a7c071
commit c56da4ca9c
No known key found for this signature in database
GPG Key ID: 5FA5BC3F5EC41F61
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/rule_with_operator.cc
View File

@ -166,8 +166,15 @@ inline void RuleWithOperator::getFinalVars(variables::Variables *vars,
if (std::find_if(trans->m_ruleRemoveTargetById.begin(),
trans->m_ruleRemoveTargetById.end(),
[&, variable, this](const auto &m) -> bool {
return m.first == m_ruleId
&& m.second == *variable->m_fullName.get();
const auto& str1 = m.second;
const auto& str2 = *variable->m_fullName.get();
return m.first == m_ruleId &&
str1.size() == str2.size() &&
std::equal(str1.begin(), str1.end(), str2.begin(),
[](char a, char b) {
return std::tolower(static_cast<unsigned char>(a)) ==
std::tolower(static_cast<unsigned char>(b));
}); // end-of std::equal
}) != trans->m_ruleRemoveTargetById.end()) {
continue;
}