github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-14 05:45:59 +03:00
Code Issues Packages Projects Releases Wiki Activity
2,871 Commits 55 Branches 109 Tags
Commit Graph

2871 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Felipe Zimmerle
bd053b0c62
EOD commit 2019-02-15 07:57:02 -03:00
Felipe Zimmerle
7f9f94a251
Makes action name a shared pointer 2019-02-14 23:20:32 -03:00
Felipe Zimmerle
dcea8db34b
Avoids copy on the transformation operation 2019-02-14 19:46:06 -03:00
Felipe Zimmerle
7a6c20b931
Lets reserve some memory for rule message 2019-02-12 16:17:23 -03:00
Felipe Zimmerle
221baa6e79
Makes m_id a shared pointer 2019-02-12 16:04:09 -03:00
Felipe Zimmerle
a4480f4811
Makes m_fileName a shared pointer 2019-02-12 13:40:12 -03:00
Felipe Zimmerle
0d2abed05d
Makes m_uri_no_query_string_decoded a shared pointer 2019-02-12 13:40:12 -03:00
Felipe Zimmerle
92f69532c4
Makes m_serverIpAddress a shared pointer 2019-02-12 13:40:12 -03:00
Felipe Zimmerle
f06df087a7
Makes m_clientIpAddress a shared pointer 2019-02-12 13:40:12 -03:00
Felipe Zimmerle
ffa8fd1bfc
Removes reference counter for RulesSet 2019-02-12 13:40:12 -03:00
Felipe Zimmerle
eaaf521354
Removes reference counter from audit_log writer 2019-02-12 13:40:12 -03:00
Felipe Zimmerle
7c10a94296
Removes reference counter from log write agent 2019-02-12 13:40:12 -03:00
Felipe Zimmerle
ade995f897
Removes referece count from audit logs 2019-02-12 13:40:11 -03:00
Felipe Zimmerle
cd9f1b40b0
Removes reference count form Actions 2019-02-12 13:40:11 -03:00
Felipe Zimmerle
9cb107b9b2
Having default actions as o shared pointer 2019-02-12 13:40:11 -03:00
Felipe Zimmerle
c4caddbe2c
regression: avoids memcheck complains 2019-02-12 13:40:11 -03:00
Felipe Zimmerle
3b6cd701da
Makes Rule a shared pointer 2019-02-12 13:40:11 -03:00
Felipe Zimmerle
5d5537bb23
Organizes methods for Rules and RulesPhases 2019-02-12 13:40:11 -03:00
Felipe Zimmerle
ca18bda692
Moves RulesSetPhases to its own file 2019-02-12 13:40:11 -03:00
Felipe Zimmerle
57553f08e3
Having a class Rules 2019-02-12 13:40:11 -03:00
Felipe Zimmerle
6504f2664b
Setup RulesSetPhases 2019-02-12 13:40:10 -03:00
Felipe Zimmerle
dc51add253
Refactoring: Renames RulesProperties to RulesSetProperties 2019-02-12 13:40:10 -03:00
Felipe Zimmerle
7fce7b384b
Refactoring: Renames Rules to RulesSet 
RulesSet does not only contain rules but alse properties
 2019-02-12 13:40:10 -03:00
Felipe Zimmerle
6d5198b1a6
make check: Updates test cases list 2019-02-12 10:13:51 -03:00
Ervin Hegedus
ccd90c51c5
Increment OVECCOUNT value for bigger regex's 2019-02-12 10:08:47 -03:00
Felipe Zimmerle
44efae6cdc
CHANGES: Adds info about #2024 2019-02-12 09:32:26 -03:00
Ervin Hegedus
a6e6bc2b5f
Allow empty anchored variable to use 2019-02-12 09:31:19 -03:00
Felipe Zimmerle
b392a1ca36
CHANGES: Adds info about #2016 2019-02-12 09:16:25 -03:00
Ervin Hegedus
2d3fbbc56a
Modified affected test cases, which checked wrong variables 2019-02-12 09:16:07 -03:00
Ervin Hegedus
17d79ed7ba
Fixed data collecting in multipart parsing 2019-02-12 09:16:07 -03:00
Felipe Zimmerle
ac61bf5fda
CHANGES: Adds info about #2017 2019-02-12 09:11:31 -03:00
Ervin Hegedus
4b3e6328e3
Fixed validateByteRange parsing method 2019-02-12 09:10:36 -03:00
Felipe Zimmerle
3dda0ea2c6
Adds a regression test strdup to valgrind suppressions list 2019-02-11 10:22:28 -03:00
Felipe Zimmerle
2dff768262
Removes a memory leak on the JSON parser 2019-02-11 10:17:02 -03:00
Felipe Zimmerle
145f2f35b7
tests: Updates secrules-language-tests 2019-02-05 11:26:03 -03:00
Felipe Zimmerle
f77db2cc2e
CHANGES: dds info about #2011 2019-01-28 16:43:31 -03:00
WGH
bd6a02d69b
Fix test issue-1831.json on LMDB 
When LMDB is enabled, ModSecurity stores its persistent variables in
"./modsec-shared-collections" file. Since this file wasn't cleared between
tests, tests behaved differently on "in-memory per-process" and LMDB backend.

This test never worked in LMDB configuration. It hasn't been discovered
until now because Travis CI didn't test LMDB configuration when test was
introduced.
 2019-01-28 16:20:02 -03:00
WGH
37cf60b8d2
Fix use of deleted Regex copy constructor in LMDB code 
Bug introduced in ad28de4f. Fixes #2008.
 2019-01-28 16:20:02 -03:00
WGH
79a24ef88d
Enable LMDB in Travis CI configuration 
LMBD is not built by default since 6143eb9,
so add explicit --with-lmdb configuration.

Missing --with-lmdb build allowed a bug in PR #2003 to pass
through, causing issue #2008.
 2019-01-28 16:20:01 -03:00
Felipe Zimmerle
dc78c0e180
Fix: Extra whitespace in some configuration directives causing error 
Issue #2006
 2019-01-21 14:44:31 -03:00
Felipe Zimmerle
df3c3f62b7 Cosmetics: coding style 2019-01-18 11:02:22 -03:00
WGH
ad28de4f14 Refactor regex code 
This commit fixes quite a few odd things in regex code:
 * Lack of encapsulation.
 * Non-method functions for matching without retrieving all groups.
 * Regex class being copyable without proper copy-constructor (potential UAF
   and double free due to pointer members m_pc and m_pce).
 * Redundant SMatch::m_length, which always equals to match.size() anyway.
 * Weird SMatch::size_ member which is initialized only by one of the three matching
   functions, and equals to the return value of that function anyways.
 * Several places in code having std::string value instead of reference.
 2019-01-18 10:34:01 -03:00
Felipe Zimmerle
e0a0fa05cc
CHANGES: Info on #2002 2019-01-14 16:29:48 -03:00
Andrei Belov
ae02076340
Fixed buffer overflow in Utils::Md5::hexdigest() 
Found via failed test (auditlog.json) on Alpine Linux 3.8.2.
 2019-01-14 16:29:07 -03:00
Felipe Zimmerle
3c1fba278c
CHANGES: Adds info about #1990 2019-01-08 10:35:33 -03:00
Andrei Belov
7c19ffea64
Implemented merge_bodylimitaction_value() for BodyLimitAction 
This change makes the following directives to be merged properly:

SecRequestBodyLimitAction
SecResponseBodyLimitAction
 2019-01-08 10:34:22 -03:00
Andrei Belov
3c41751eda
Implemented merge_ruleengine_value() for RuleEngine 
This change makes the SecRuleEngine directive to be merged properly.
 2019-01-08 10:34:22 -03:00
Andrei Belov
161c256333
Implemented merge_boolean_value() for ConfigBoolean 
This change makes the following directives to be merged properly:

SecRequestBodyAccess
SecResponseBodyAccess
SecXmlExternalEntity
SecUploadKeepFiles
SecTmpSaveUploadedFiles
 2019-01-08 10:34:22 -03:00
Andrei Belov
2d11ff1a14
Implemented merge() method for ConfigInt, ConfigDouble, ConfigString 
This change makes the following directives to be merged properly:

SecRequestBodyLimit
SecResponseBodyLimit
SecUploadFileLimit
SecUploadFileMode
SecUploadDir
SecTmpDir
SecArgumentSeparator
SecWebAppId
SecHttpBlKey
 2019-01-08 10:34:22 -03:00
Felipe Zimmerle
78b7fa4e2c
Adds missing drop.h 2018-12-26 11:05:54 -03:00