27 Commits

Author SHA1 Message Date
brectanus
20cc395510 Added mlogc source. 2008-09-02 23:10:36 +00:00
brectanus
bb2e4b9a3e Fix cssDecode. See #512. 2008-08-14 23:37:40 +00:00
brectanus
10713fbd37 Sync up branches/2.5.x and trunk. 2008-07-31 22:36:24 +00:00
ivanr
ae40b8c213 Implemented cssDecode. 2008-07-16 13:08:12 +00:00
brectanus
f428d37680 Cleanup - remove extraneous whitespace and tabs. 2008-02-07 21:45:05 +00:00
brectanus
9fb03d277d Fixing code based on review comments...
Cleaned up what vars are cacheable.
Added parens around "*foo++" where it clarified the operation to be "*(foo++)".
Added " at VARNAME" to operator matches where needed.
Escaped var->name in the var generation (user-supplied data).
Marked a bunch of TODOs as ENHs instead.
Transformed some C++ style comments to C style.
Removed the %0-9 macros code which was commented out.
Optimized some ctl action code so that multiple ifs are else ifs.
Implemented some error messages marked as ENH.
Make commented out acmp debugging a configure-time option.
Cleanup GEO debug log messages.
Added relative filename support for geo dbs.
Added help text to Sec* directives.
2008-01-18 00:47:30 +00:00
brectanus
b5033e6e29 It is 2008 now :) 2008-01-11 00:00:31 +00:00
brectanus
6dd6156466 Fixed returns for urlDecodeUni, urlDecode, urlEncode and normalisePathWin. See #439. 2007-12-20 23:29:07 +00:00
brectanus
9551218d23 Fixed URL decoding with invalid encoding. See #439. 2007-12-20 23:01:38 +00:00
brectanus
78f83198d0 Remove \0ooo support from t:escapeSeqDecode. See #423. 2007-12-20 21:04:19 +00:00
ivanr
f64c7c39e8 Lua: Added support for scripting to @inspectFile. 2007-12-20 15:53:23 +00:00
brectanus
d2dee97a31 Fix jsDecode \xHH to verify HH is there and valid hex. See #439. 2007-12-19 00:31:08 +00:00
brectanus
aa68fff104 Fixed decoding \9 with t:escapeSeqDecode. See #423. 2007-12-14 00:30:25 +00:00
brectanus
8aa31fd099 Change jsDecodeuni to jsDecode which also decodes all the other JS escapes. See #193. 2007-12-14 00:19:46 +00:00
brectanus
b0de659133 Added t:jsDecodeUni handling unicode similar to t:urlDecodeUni. See #193. 2007-12-13 00:58:02 +00:00
brectanus
c8e5c7fcd5 Sync trunk from branches/2.1.x (merge in branch fixes). 2007-09-14 21:00:56 +00:00
brectanus
8f6385f784 Added logdata action (still needs byte limit). See #40. 2007-08-10 00:22:15 +00:00
brectanus
fe8c564ed0 Added MODSEC_BUILD variable. See #38. 2007-08-08 18:25:03 +00:00
brectanus
81d0f84ad3 Update copyright text to Breach Security, Inc.
Merge in changes from branches/2.1.x
2007-06-14 16:05:45 +00:00
brectanus
61238ca22f Argh! That last one was not meant to be checked in - reverting 281. 2007-05-25 21:01:11 +00:00
brectanus
e11ff85421 Fixed log_escape_raw when length was <= 0 2007-05-25 20:56:03 +00:00
brectanus
eaa8e444dd Fixed decoding full-width unicode in t:urlDecodeUni for ASCII range 0xFF01-0xFF5E. Probably need more work/testing. (See #122) 2007-05-16 20:09:28 +00:00
brectanus
a68eb04884 Add geo lookup support. See #22. 2007-05-11 16:14:11 +00:00
brectanus
cf024ded05 Fix segfault when logging NULL text during request reading errors and upcoming fix for sending alerts on such errors. 2007-03-05 22:12:34 +00:00
brectanus
f4fb4ed4f6 Updates to quiet some compiler warnings. 2007-03-01 11:49:56 +00:00
brectanus
79d232ccff Fixed some casting issues for compiling on NetWare (Guenter Knauf). 2007-03-01 11:34:13 +00:00
ivanr
3f80fdac3b Import ModSecurity 2.1.0-rc7 2007-02-06 12:29:22 +00:00