2651 Commits

Author SHA1 Message Date
Victor Hora
2037a08b34
Fix STATUS var parsing and accept STATUS_LINE var for v2 backward compatibility 2018-04-24 09:06:39 -03:00
Felipe Zimmerle
a806f26be1
CHANGES: Adds info about: #1750 2018-04-23 22:55:51 -03:00
Andrei Belov
268f34bbcc
Fix memory leak in modsecurity::utils::expandEnv()
Found by ASAN.
2018-04-23 22:54:13 -03:00
Felipe Zimmerle
f888f4e5e4
CHANGES: Adds info about: #1751 2018-04-23 22:46:21 -03:00
Ervin Hegedus
e7ea5433d5
Initialize m_dtd member in ValidateDTD class as NULL 2018-04-23 22:43:36 -03:00
Felipe Zimmerle
3ee65a31c5
CHANGES: Adds info about: #1739 2018-04-23 22:12:58 -03:00
Robert Paprocki
f7beb17570
Fix broken @detectxss operator regression test 2018-04-23 22:11:00 -03:00
Felipe Zimmerle
6a710b3a4c
CHANGES: Adds info about: #1743, #1744 2018-04-23 22:09:15 -03:00
Andrei Belov
3d06e1b8b6
Fix github_issue reference in regression test 2018-04-23 22:09:03 -03:00
Andrei Belov
5e65d560f8
Fix utils::string::ssplit() to handle delimiter in the end of string
This closes #1743.
2018-04-22 11:37:30 -03:00
Victor Hora
5018358371
Fix variable FILES_TMPNAMES 2018-04-22 11:11:46 -03:00
Felipe Zimmerle
077b18252f
CHANGES: Adds info about: #1729, #1730 2018-04-05 09:51:49 -03:00
Andrei Belov
8285a97460
Fix memory leak in Collections
This closes #1729.
2018-04-05 09:48:51 -03:00
Felipe Zimmerle
ea7d1ff54b
CHANGES: Adds to be released marking 2018-04-05 09:46:56 -03:00
Felipe Zimmerle
8d0f51beda
Change release version to v3.0.2 v3.0.2 2018-04-03 10:47:48 -03:00
Felipe Zimmerle
871a131864
CHANGES: Adds info about version issue 2018-04-03 10:42:29 -03:00
Felipe Zimmerle
2e87c4e751
Fix version number on libtool 2018-04-03 01:51:46 -03:00
Felipe Zimmerle
f67ff0aa67
Change release version to v3.0.1 v3.0.1 2018-04-01 21:23:25 -03:00
Felipe Zimmerle
01625bbb38
CHANGES: The correct is: ruleRemoveByTag not ruleRemoveById 2018-03-29 18:03:15 -03:00
Felipe Zimmerle
ff0d451a5c
Fix maxmind test case 2018-03-29 17:24:32 -03:00
Felipe Zimmerle
0ca5994744
Adds support for ctl:ruleRemoveByTag action 2018-03-26 17:01:53 -03:00
Felipe Zimmerle
9537cfceed
Fix SecUploadDir configuration merge 2018-03-23 11:32:46 -03:00
Felipe Zimmerle
ab3afb2ed2
CHANGES: Adds info about: #1716 2018-03-22 23:10:49 -03:00
Andrei Belov
dcbb06be43
Include all prerequisites for "make check" into dist archive 2018-03-22 23:09:44 -03:00
Felipe Zimmerle
9505ca7e66
CHANGES: Adds info about: #1715 2018-03-22 23:07:47 -03:00
Andrei Belov
601e0d7040
Adjust tests for @inspectFile operator 2018-03-22 23:06:42 -03:00
Andrei Belov
138e301695
Reverse logic of checking output in @inspectFile
This change makes @inspectFile in ModSecurity 3.x to operate in exact
the same way as it operates in ModSecurity 2.x, so existing helper scripts
like runav.pl [1] will work without any changes.

[1] https://github.com/SpiderLabs/owasp-modsecurity-crs/blob/v3.0/master/util/av-scanning/runav.pl
2018-03-22 23:06:30 -03:00
Felipe Zimmerle
c61155424e
Adds support to libMaxMind 2018-03-22 23:03:44 -03:00
Felipe Zimmerle
15b38fbe5d
Travis: adds --without-maxmind option 2018-03-22 19:12:09 -03:00
Felipe Zimmerle
df169ea108
Adds support for libMaxMind 2018-03-22 19:11:42 -03:00
Felipe Zimmerle
7bff76d794
Parser: Updates the generated parser files 2018-03-21 18:18:58 -03:00
Victor Hora
480a2f89d7
Disable SecCollectionTimeout parser error 2018-03-12 22:28:07 -03:00
Victor Hora
22334c9bb6
Adds capture action to detectXSS 2018-03-12 22:10:56 -03:00
Felipe Zimmerle
b59d19e95a
CHANGES: Adds info about #1701 2018-03-12 20:22:17 -03:00
Victor Hora
e50c317b7a
Temporarily accept invalid MULTIPART_SEMICOLON_MISSING operator 2018-03-12 20:09:17 -03:00
Felipe Zimmerle
70ace0faa4
Adds capture action to detectSQLi 2018-03-09 12:58:00 -03:00
Felipe Zimmerle
0f361b7065
Adds capture action to RBL 2018-03-09 12:49:12 -03:00
Felipe Zimmerle
df25c48f53
Adds capture action to verifyCC 2018-03-09 11:26:24 -03:00
Felipe Zimmerle
77a885da5f
Adds capture action to verifySSN 2018-03-09 09:42:05 -03:00
Felipe Zimmerle
60b2469097
Updates bison parser 2018-03-08 19:05:53 -03:00
Felipe Zimmerle
0b494c4cdc
Adds capture action to verifyCPF 2018-03-08 19:05:31 -03:00
Victor Hora
64ce41280d
Prettier error messages for unsupported configurations (UX) 2018-03-07 17:58:29 -03:00
Victor Hora
a66acebc05
Add missing verify*** transformation statements to parser 2018-03-05 17:50:14 -03:00
Felipe Zimmerle
8bb64c3ee3
Code cosmetics: removes an unused piece of code 2018-03-01 11:52:01 -03:00
Felipe Zimmerle
450c966da0
Fix a set of compilation warnings 2018-03-01 11:36:31 -03:00
Felipe Zimmerle
c8666fae31
Check for disruptive action on SecDefaultAction 2018-02-28 14:02:47 -03:00
Felipe Zimmerle
6842d4bba8
Fix block-block infinite loop.
Issue #1614
2018-02-28 12:05:28 -03:00
Felipe Zimmerle
c51e3e242c
CHANGES: Adds info about #1636 2018-02-28 11:04:18 -03:00
Felipe Zimmerle
4ac14a2622
Cosmetics on top of: #1636 2018-02-28 11:03:19 -03:00
Minasu
a0bea7356d
Correction remove_by_tag and remove_by_msg 2018-02-28 10:31:45 -03:00