Now accept SecRules regardless of the letter case

This commit is contained in:
Felipe Zimmerle
2015-09-03 11:06:51 -03:00
parent 8675383c0d
commit f2ed890ea6
2 changed files with 33 additions and 13 deletions

View File

@@ -0,0 +1,20 @@
[
{
"enabled":1,
"version_min":300000,
"version_max":0,
"title":"Testing action :: SecRule directives should be case insensitive",
"expected":{
"audit_log":"",
"debug_log":"Executing operator \"@contains \" with param \"PHPSESSID\" against REQUEST_HEADERS.",
"error_log":""
},
"rules":[
"secruleengine On",
"secdebuglog \/tmp\/modsec_debug.log",
"secdebugloglevel 9",
"secrule REQUEST_HEADERS \"@contains PHPSESSID\" \"id:1,t:lowercase,t:none,msg:'This is a test, %{REQUEST_HEADERS:Accept}%'\"",
"secrule TX \"@contains to_test\" \"id:2,t:lowercase,t:none\""
]
}
]