github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-13 21:36:00 +03:00
Code Issues Packages Projects Releases Wiki Activity

Removes slash from REQUEST_BASENAME

Browse Source
This commit is contained in:
Felipe Zimmerle 2016-11-22 15:33:32 -03:00
parent 293a849668
commit d3a4ec760c
No known key found for this signature in database
GPG Key ID: E6DFB08CE8B11277
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/transaction.cc
View File

@ -406,9 +406,9 @@ int Transaction::processURI(const char *uri, const char *method,
m_collections.store("REQUEST_FILENAME", path_info);
size_t offset = path_info.find_last_of("/\\");
if (offset != std::string::npos) {
std::string basename = std::string(path_info, offset,
path_info.length() - offset);
if (offset != std::string::npos && path_info.length() > offset + 1) {
std::string basename = std::string(path_info, offset + 1,
path_info.length() - (offset + 1));
m_collections.store("REQUEST_BASENAME", basename);
}
m_collections.store("REQUEST_METHOD", method);

2
test/test-cases/regression/variable-REQUEST_BASENAME.json
View File

@ -33,7 +33,7 @@
]
},
"expected":{
"debug_log":"Target value: \"/login.php\" \\(Variable: REQUEST_BASENAME\\)"
"debug_log":"Target value: \"login.php\" \\(Variable: REQUEST_BASENAME\\)"
},
"rules":[
"SecRuleEngine On",