diff --git a/doc/modsecurity2-apache-reference.xml b/doc/modsecurity2-apache-reference.xml index 08a071be..fda67ea5 100644 --- a/doc/modsecurity2-apache-reference.xml +++ b/doc/modsecurity2-apache-reference.xml @@ -5505,6 +5505,144 @@ against "REQUEST_PROTOCOL" required. specify a human-readable message (using the msg action) to provide further clarification. + The format of the second part of the engine message depends on + whether it was generated by the operator (which happens on a match) or + by the rule processor (which happens where there is not a match, but the + negation was used): + + + + @beginsWith s- String match %0 at %1. + + + + @contains - String match %0 at %1. + + + + @containsWord - String match %0 at %1. + + + + @endsWith - String match %0 at %1. + + + + @eq - Operator EQ matched %0 at %1. + + + + @ge - Operator GE matched %0 at %1. + + + + @geoLookup - Geo lookup for %0 succeeded at %1. + + + + @inspectFile - File %0 rejected by the approver script %1: + %2 + + + + @le - Operator LE matched %0 at %1. + + + + @lt - Operator LT matched %0 at %1. + + + + @rbl - RBL lookup of %0 succeeded at %1. + + + + @rx - Pattern match %0 at %1. + + + + @streq - String match %0 at %1. + + + + @validateByteRange - Found %0 byte(s) in %1 outside range: + %2. + + + + @validateDTD - XML: DTD validation failed. + + + + @validateSchema - XML: Schema validation failed. + + + + @validateUrlEncoding + + + + Invalid URL Encoding: Non-hexadecimal digits used at + %0. + + + + Invalid URL Encoding: Not enough characters at the end of + input at %0. + + + + + + @validateUtf8Encoding + + + + Invalid UTF-8 encoding: not enough bytes in character at + %0 [offset %1]. + + + + Invalid UTF-8 encoding: invalid byte value in character at + %0 [offset %1]. + + + + Invalid UTF-8 encoding: overlong character detected at %0 + [offset %1]. + + + + Invalid UTF-8 encoding: use of restricted character at %0 + [offset %1]. + + + + Invalid UTF-8 encoding: decoding error at %0 [offset + %1]. + + + + + + @verifyCC - CC# match %0 at %1 [offset %2]. + + + + Messages not related to operators: + + + + When SecAction directive is processed - + Unconditional match in SecAction. + + + + When SecRule does not match but negation is + used - Match of %0 against %1 required. + + + The metadata fields are always placed at the end of the alert entry. Each metadata field is a text fragment that consists of an open bracket followed by the metadata field name, followed by the value and @@ -5774,4 +5912,4 @@ Server: Apache/2.x.x - + \ No newline at end of file