github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-14 13:56:01 +03:00
Code Issues Packages Projects Releases Wiki Activity
1,810 Commits 55 Branches 109 Tags
Commit Graph

104 Commits

Author SHA1 Message Date
Victor Hora
cc97550b71 Enable optimization for large stream input by default on IIS 2018-12-04 11:44:40 -05:00
Victor Hora
a21f97066b Fix modsecurity.conf for IIS update CHANGES file 2018-11-12 15:54:36 -05:00
Victor Hora
f35075b2a7 IIS: Update Wix installer to bundle a supported CRS version (3.0) 2018-11-12 15:45:47 -05:00
Victor Hora
63cbd91723 IIS: Update dependencies for Windows build 2018-11-11 15:33:29 -05:00
Victor Hora
45337265f1 Set SecStreamInBodyInspection by default on IIS builds (#1299) 2018-11-09 18:06:56 -05:00
Victor Hora
22322ce355 Update modsecurity.conf file for IIS build 2018-11-09 17:57:31 -05:00
Allan Boll
e97799c9bc Windows build, fixed duplicate YAJL dir in script 2018-11-04 13:04:03 -05:00
Victor Hora
1843b79adb IIS: Make failed MSI installer messages more helpful 2018-11-02 19:01:36 -04:00
Allan Boll
a55a9481b3 IIS: Remove body prebuffering again. Unneeded due to no lock on modsecProcessRequest. 2018-10-19 19:49:44 -04:00
Allan Boll
51a9717601
IIS: no lock on ProcessRequest. No reload of config. (#24) 
IIS: no lock on ProcessRequest. No reload of config.
 2018-09-06 10:08:06 -03:00
Allan Boll
18af259777
IIS, buffer request body before taking lock 
IIS, buffer request body before taking lock
 2018-09-06 10:02:02 -03:00
Ryan Kramer
9bfdbc57db
IIS: set overrideModeDefault to Allow so that individual websites can add <ModSecurity ...> to their web.config file 2018-05-28 17:54:36 -03:00
Allan Boll
b3a527f593
Fixed a typo in build_yajl.bat 2017-10-05 16:39:57 +00:00
Felipe Zimmerle
c917df0f2a
Set of fixes to make the build/win to work in our buildbots 2017-10-04 13:48:45 +00:00
Victor Hora
1e8b4669eb
Refactoring of IIS build scripts 2017-07-17 23:34:04 -03:00
culyerr
b83c1109ad
Fixed IPv4+Port address parsing 2016-10-04 13:23:46 -03:00
Felipe Zimmerle
88bffb1e3e Version 2.9.1 (final) 
Increasing version to 2.9.1 (final)
 2016-03-09 14:48:29 -03:00
Felipe Zimmerle
ad9257c374 Version 2.9.1 
Increasing version to 2.9.1 and performed small fixes on the
CHANGES file
 2016-02-03 11:04:50 -03:00
Felipe Zimmerle
51f1ff6ebf iis-installer: Adds IIS 10 on the suported list 
As reported on issue #931 the installer was marking ModSecurity as incompatible
with IIS 10.
 2016-01-04 10:41:09 -03:00
Felipe Zimmerle
a9a39255b9 Version 2.9.0 
Increasing version to 2.9.0.
 2015-02-12 10:58:11 -08:00
Felipe Zimmerle
b304ab1aa2 Improves SecRemoteRules messages on IIS 
IIS was not displaying correctly the error messages and the amount of
loaded rules while the operator SecRemoteRules was used.
 2015-02-12 09:37:32 -08:00
Felipe Zimmerle
f6d6cea015 IIS: Creates IIS_VERSION definition 
This definition is currently used in two different circumstances: Report with
accuracy that the server is an IIS  (status call), and also show the amount of
loaded remote rules on the windows logs. Different from Apache which loads the
rules twice, IIS just do it once.
 2014-12-11 14:47:59 -08:00
Felipe Zimmerle
6c0cdab35a IIS: Changes Curl version and removes OpenSSL dependency 
As the this new Curl version supports well the Windows certificate storage,
removing the dependency on the OpenSSL. Also changing the build scripts to work
accordingly. As the cmake build of Curl is said to broken abandoning it in
favor of the nmake files. Thanks to Gregg Smith and Steffen.
 2014-12-11 14:47:59 -08:00
Felipe Zimmerle
23f6f6e6e6 Version 2.9.0-RC1 
Increasing version to 2.9.0-RC1.
 2014-11-17 19:34:55 -08:00
Felipe Zimmerle
277f2e1e6f iis: adds openssl to the build scripts 
openssl is necessary to have curl talking in https.
 2014-11-17 19:32:43 -08:00
Felipe Zimmerle
9fe72b72de Improves the CA validation 
On IIS CA validation was not working as libcurl on windows does not look for a
certificate store, unless it is specified. The resource downloads are now
respecting the SecRemoteRulesFailAction.
 2014-11-17 19:32:32 -08:00
Felipe Zimmerle
b02256cf1e IIS: temporary removes ssdeep support on IIS 
It seems likes ssdeep compilation is facing problems linking on 64bits
platforms. Temporary disable to 2.9.0-RC1 release (IIS only).
 2014-11-16 16:56:23 -08:00
Felipe Zimmerle
85c7ba0c7e IIS: Adds ssdeep/libfuzzy to msi installer 
fuzzy.dll should be installed by the ModSecurityIIS installer.
 2014-11-16 16:56:14 -08:00
Felipe Zimmerle
858d480ec9 iis: Copy yajl.dll into release files folder 
This will help the automagically release process
 2014-11-15 07:37:57 -08:00
Felipe Zimmerle
73d7955ac1 Fix the compatible IIS versions 
At installer file the IIS 6 was considered supported, however, it is
not supported. Supported IIS versions are 7 and 8.
 2014-11-14 13:45:49 -08:00
Felipe Zimmerle
9b836b652a Initial support to load rules from a remote server 
New directive `SecRemoteRules' was added. It allows the user to load a
set of rules from a given HTTP server.
 2014-11-14 11:53:40 -08:00
Felipe Zimmerle
81bde0842d Adds curl support to main core 
Curl was used only by mlogc, as we want to expand ModSecurity to load
external rules/resources it is now a dependency of the core as well.
 2014-11-14 11:53:40 -08:00
Felipe \"Zimmerle\" Costa
7affec82a8 iis: Adds ssdeep support 2014-11-14 11:53:39 -08:00
Felipe "Zimmerle" Costa
d4c2b96b89 IIS: Changes event ID (Issue #676) 
ModSecurityIIS was reporting events to Windows using ID 0
which seems cause an unexpected verbose message at the
event logger window as reported on #676, changing the ID
to 0x1, although will be nice to have separated events for
misconfiguration, warnings, etc...
 2014-05-23 09:35:00 -03:00
Felipe "Zimmerle" Costa
0f7cbced8c IIS: Cosmetics: Removes CLFR. 
Converts mymodule.cpp from CLRF to Unix format as the rest
of the repository.
 2014-05-23 09:30:19 -03:00
Felipe "Zimmerle" Costa
1d3c8349fa IIS: Adds a VS Custom build to speed up the dev process 
Custom build stops the IIS Server before start the compilation.
After finish the compilation the ModSecurity.DLL is copied to the
inetsrv folder and the IIS is restarted.
 2014-05-23 09:28:15 -03:00
Felipe "Zimmerle" Costa
3a7def63a3 IIS: Adds mlogc to ModSecurity solution 2014-05-22 18:34:29 -03:00
Felipe "Zimmerle" Costa
90c5a420da IIS: Cosmetics: Files are better grouped in VS 
This commit places the files inside the correct filters
 2014-05-22 10:22:18 -03:00
Felipe Zimmerle
0826380acd Version 2.8.0 2014-03-31 19:31:02 -07:00
Felipe Zimmerle
66939d059b Adds initial support to @detectXSS 
Libinject was recently updated to support XSS detection. This commit adds
initial support to it.
 2014-03-31 16:22:11 -07:00
Felipe "Zimmerle" Costa
8ff3de5b6f iis: Disables installer repair 
Currently we don't have support to repair, so, this commit is
marking it as disabled.
 2014-03-31 16:22:10 -07:00
Felipe "Zimmerle" Costa
d6dd1f0e94 iis: Adding VC110 files to the Windows installer 
For some reason the DLLs still demands the dependencies of the
VC110 files. Providing those as part of the MSI installer
 2014-03-31 16:22:10 -07:00
Felipe "Zimmerle" Costa
93b12df721 iis: Removes unnecessary files. 
"Installer project" is now longer used.
 2014-03-31 16:22:10 -07:00
Felipe "Zimmerle" Costa
fe727c7021 iis: Updated OWASP crs to version 2.2.9 2014-03-31 16:22:10 -07:00
Felipe "Zimmerle" Costa
10db384316 iis: Adds cleanup methods to the installer 
Older versions of ModSecurity left files/configurations behind. This commit
adds capability to cleanup the IIS configuration files.
 2014-03-31 16:22:10 -07:00
Felipe "Zimmerle" Costa
f8f06f7930 IIS: Updates build_msi.bat to fit the new WiX install options 
Instead of -dPlatform a recent update in the WiX files are demanding
the parameter -arch, although this parameter is not valid nor needed
while running "light".
 2014-03-31 16:22:10 -07:00
Felipe "Zimmerle" Costa
4d7d1ba822 iis: Adds listing dependencies script 
This script could be used in order to verify all ModSecurity run time
dependencies. It is now part of ModSecurity folder in Program menu.
Cosmetics changes in the installer
 2014-03-31 16:22:10 -07:00
Felipe "Zimmerle" Costa
619758c0c2 iis: Adds condition to avoid the use of 32b msi on a 64b os 
The 64bits version of the package offer the possibility to install the 32bits
version of the DLL along with all 32bits dependencies.
 2014-03-31 16:22:10 -07:00
Felipe "Zimmerle" Costa
93a86f6f33 iis: Adds Visual C++ 12.0 Runtime to be part of the msi package 
Visual C++ 12.0 Runtime files are now part of ModSecurity MSI package.
Users don't have to download the vcredist files anymore. Build script
was also updated, to handle the new flag -arch.
 2014-03-31 16:22:10 -07:00
Felipe Zimmerle
ec61749a68 Changes JSON parser to not accept parcial contents 
Also cleanup installer file.
 2014-03-31 16:22:10 -07:00