mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-09-30 03:34:29 +03:00
Duplicates the url variable in the disruptive action
The log message needs to be freed by the consumer. Doing the same with the url to keep the API consistent.
This commit is contained in:
@@ -1297,7 +1297,9 @@ int Transaction::processLogging() {
|
||||
*/
|
||||
bool Transaction::intervention(ModSecurityIntervention *it) {
|
||||
if (m_it.disruptive) {
|
||||
it->url = m_it.url;
|
||||
if (m_it.url) {
|
||||
it->url = strdup(m_it.url);
|
||||
}
|
||||
it->disruptive = m_it.disruptive;
|
||||
it->status = m_it.status;
|
||||
|
||||
|
Reference in New Issue
Block a user