brectanus
2203428507
Prefer "offset" to "pos".
2007-12-12 18:43:40 +00:00
brectanus
e7e9756966
Add var name to validateUtf8Encoding message. See #408 .
2007-12-12 18:40:35 +00:00
brectanus
3c1d5a0210
More efficient multimatch support and cleaned up debugging and messages. See #69 .
2007-12-12 17:56:25 +00:00
brectanus
2dff0fb9f5
Speed up luhn algorithm and add multimatching capabilities to verifyCC. See #69 .
2007-12-12 01:30:58 +00:00
brectanus
715a8eae58
Implement SecMarker. See #416 .
2007-12-11 17:53:50 +00:00
ivanr
37f5231ccd
Minor code fixes.
2007-12-03 21:13:37 +00:00
brectanus
9e9bb318b3
Rewrite the luhn algorithm to be faster and easier to read. See #69 .
2007-12-01 00:42:28 +00:00
brectanus
13e209909f
Add in verifyCC operator from mod_security2_op_verifyCC.c. See #69 .
...
This still needs to be fixed.
2007-11-30 23:26:06 +00:00
ivanr
d3a0a2887a
Fix utf-8 validation (again\!\!\!).
2007-11-29 13:30:39 +00:00
brectanus
1860e2a35e
Renamed SecGeoLookupsDb to SecGeoLookupDB.
2007-11-26 17:04:42 +00:00
brectanus
aff6900539
Initial full pass through code to fix issues with 64-bit/mismatch sign/mismatch size printf style formatters.
...
Still need to look more into how we are handling time and convert to apr_time_t (or time_t) where appropriate.
Still need to look into our use of 'long' as windows is LLP64 where 'long' is still 32-bit.
2007-11-15 19:09:14 +00:00
brectanus
e45ea12fc8
Fix warnings on Solaris and/or 64bit builds.
2007-11-02 22:31:47 +00:00
brectanus
83a7886071
Now use memcmp() vs strncmp() in string comparison operators since we already short-circuit when the match will not fit in the target.
...
Added @containsWord. See #182 .
2007-10-02 18:50:35 +00:00
brectanus
da1399f0b8
Added TX:LAST_MATCHED_VAR_NAME. See #123 .
2007-10-01 22:35:52 +00:00
brectanus
fe1021e369
More cleanup of error messages and marking as relevant. See #4 .
2007-09-28 20:02:02 +00:00
brectanus
63a47c370e
Prefer %d string formatter to %i so we do not get warnings on some platforms.
2007-09-27 21:34:29 +00:00
brectanus
2ec596e83a
Fix error message in validateByteRange to include the target variable name. See #157 .
2007-08-08 15:16:26 +00:00
brectanus
3e5e2a06b7
Stricter validation for @validateUtf8Encoding.
...
Capture the match in TX:0 when using "capture" action w/@pm operators.
2007-07-31 19:04:07 +00:00
brectanus
19887f9cc6
Added @within string comparison operator with support for macro expansion. See #134 .
2007-06-21 02:21:06 +00:00
brectanus
b58efb3466
Update CHANGES.
...
Reversion from 2.2. to 2.5.
Update @pmFromFile to base relative filenames off of rule file path.
2007-06-20 19:58:01 +00:00
brectanus
81d0f84ad3
Update copyright text to Breach Security, Inc.
...
Merge in changes from branches/2.1.x
2007-06-14 16:05:45 +00:00
brectanus
11456dd87a
Use pmFromFile instead of pmfile and p=phrase instead of parallel in docs. See #16 .
2007-06-04 20:16:48 +00:00
brectanus
f1607d007b
Cleanup message output. See #16 .
2007-06-01 15:21:04 +00:00
brectanus
e887faac2b
Add @pm/@pmfile operators (parallel patch). See #16 .
2007-05-30 22:02:35 +00:00
brectanus
c594c205c3
Fix new string operators to all resolve macros.
...
Rename startsWith operator in code to match docs.
See #54 .
2007-05-29 14:58:05 +00:00
brectanus
a627e96c75
Lessen "capture" debug log messages.
2007-05-17 12:02:59 +00:00
brectanus
e03ea11f9a
Only calculate debug data when we are debugging.
2007-05-16 19:48:21 +00:00
brectanus
a68eb04884
Add geo lookup support. See #22 .
2007-05-11 16:14:11 +00:00
brectanus
c559f3ee21
Change @eq to @streq. See #54 .
2007-05-03 03:41:29 +00:00
brectanus
3f7fc7c758
Added string comparison operators: @contains, @is, @beginsWith and @endsWith with support for macro expansion. See #54 .
2007-05-01 22:00:34 +00:00
brectanus
a3c3f25ae0
Fix macro expansion. See #118 .
...
Fix some debug log output to escape NULs properly in preparation for #54 .
Up version to prepare for 2.2.0 pre-releases.
2007-05-01 21:36:24 +00:00
brectanus
00dcb2714f
Add the PCRE_DOLLAR_ENDONLY option when compiling regular expression for the @rx operator and variables. (trac #57 )
2007-04-05 01:54:03 +00:00
brectanus
383119a147
Really set PCRE_DOTALL option when compiling the regular expression for the @rx operator as the docs state. (trac #51 )
2007-03-27 17:22:35 +00:00
brectanus
485c664a42
Enhance debug log output for capturing to detect all regex/capture mismatches (trac #21 ).
2007-03-27 17:13:42 +00:00
brectanus
891859f9c5
Revert back to using captured regex execution as it seems to be more effecient as the ovector can be used for working space even if it is not used for captures.
...
Warn when captures are used in the regex, but "capture" not specified.
2007-03-27 15:32:53 +00:00
brectanus
d1ada359dd
Optimize regex execution to not capture unless 'capture' action used.
2007-03-21 14:06:36 +00:00
brectanus
f4fb4ed4f6
Updates to quiet some compiler warnings.
2007-03-01 11:49:56 +00:00
ivanr
3f80fdac3b
Import ModSecurity 2.1.0-rc7
2007-02-06 12:29:22 +00:00
