diff --git a/doc/modsecurity2-apache-reference.xml b/doc/modsecurity2-apache-reference.xml
index 2e608548..d8ec6cf8 100644
--- a/doc/modsecurity2-apache-reference.xml
+++ b/doc/modsecurity2-apache-reference.xml
@@ -2777,6 +2777,13 @@ SecRule XML:/xq:employees/employee/name/text()
+
+ length
+
+ This function converts the input to its numeric length (count of
+ characters).
+
+
lowercase
@@ -2876,6 +2883,27 @@ SecRule XML:/xq:employees/employee/name/text()
This function calculates a SHA1 hash from input.
+
+
+ trimLeft
+
+ This function removes whitespace from the left side of
+ input.
+
+
+
+ trimRight
+
+ This function removes whitespace from the right side of
+ input.
+
+
+
+ trim
+
+ This function removes whitespace from both the left and right
+ sides of input.
+
@@ -3910,6 +3938,53 @@ SecRule XML:/soap:Envelope/soap:Body/q1:getInput/id() "123" phase:2,deny
+
+ beginsWith
+
+ Description: This operator is a
+ string comparison and returns true if the parameter value is found at
+ the beginning of the input. Macro expansion is performed so you may use
+ variable names such as %{TX.1}, etc.
+
+ Example:
+
+ SecRule REQUEST_LINE "!@beginsWith GET" t:none,deny,status:403
+SecRule REQUEST_ADDR "^(.*)\.\d+$" deny,status:403,capture,chain
+SecRule ARGS:gw "!@beginsWith %{TX.1}"
+
+
+
+ contains
+
+ Description: This operator is a
+ string comparison and returns true if the parameter value is found
+ anywhere in the input. Macro expansion is performed so you may use
+ variable names such as %{TX.1}, etc.
+
+ Example:
+
+ SecRule REQUEST_LINE "!@contains .php " t:none,deny,status:403
+SecRule REQUEST_ADDR "^(.*)$" deny,status:403,capture,chain
+SecRule ARGS:ip "!@contains %{TX.1}"
+
+
+
+ endsWith
+
+ Description: This operator is a
+ string comparison and returns true if the parameter value is found at
+ the end of the input. Macro expansion is performed so you may use
+ variable names such as %{TX.1}, etc.
+
+ Example:
+
+ SecRule REQUEST_LINE "!@endsWith HTTP/1.1" t:none,deny,status:403
+SecRule ARGS:route "!@endsWith %{REQUEST_ADDR}" t:none,deny,status:403
+
+
eq
@@ -3959,6 +4034,22 @@ SecRule XML:/soap:Envelope/soap:Body/q1:getInput/id() "123" phase:2,deny@inspectFile /opt/apache/bin/inspect_script.pl"
+
+ is
+
+ Description: This operator is a
+ string comparison and returns true if the parameter value matches the
+ input exactly. Macro expansion is performed so you may use variable
+ names such as %{TX.1}, etc.
+
+ Example:
+
+ SecRule ARGS:foo "!@is bar" t:none,deny,status:403
+SecRule REQUEST_ADDR "^(.*)$" deny,status:403,capture,chain
+SecRule REQUEST_HEADERS:Ip-Address "!@is %{TX.1}"
+
+