brectanus
c72057bc57
Cleanup CHANGES.
2008-01-22 06:59:06 +00:00
brectanus
18e9ef0808
Remove default transformations. See #445 .
2008-01-22 05:50:42 +00:00
brectanus
0d24a08f33
Implemented SecRuleUpdateActionById. See #442 .
2008-01-19 02:23:41 +00:00
brectanus
9fb03d277d
Fixing code based on review comments...
...
Cleaned up what vars are cacheable.
Added parens around "*foo++" where it clarified the operation to be "*(foo++)".
Added " at VARNAME" to operator matches where needed.
Escaped var->name in the var generation (user-supplied data).
Marked a bunch of TODOs as ENHs instead.
Transformed some C++ style comments to C style.
Removed the %0-9 macros code which was commented out.
Optimized some ctl action code so that multiple ifs are else ifs.
Implemented some error messages marked as ENH.
Make commented out acmp debugging a configure-time option.
Cleanup GEO debug log messages.
Added relative filename support for geo dbs.
Added help text to Sec* directives.
2008-01-18 00:47:30 +00:00
brectanus
31e3ada844
Fixed phase 5 rules not being excludable.
2008-01-08 20:45:54 +00:00
brectanus
badb2791f1
Initial 'configure' based compilation (buildconf generates configure script).
2008-01-02 21:32:10 +00:00
ivanr
2068357af8
Added m.getvars() and finalised Lua support.
2007-12-21 12:50:03 +00:00
brectanus
59685455d9
Update core rules to 1.5.1.
2007-12-20 17:01:12 +00:00
ivanr
b9a28882b2
Enhanced allow.
2007-12-17 11:22:47 +00:00
brectanus
5bd9e0640f
Add CHANGES entry. See #425 .
2007-12-15 00:57:21 +00:00
brectanus
3c4eacf6f1
Update Core Rules to those in 2.1.4.
2007-12-14 23:23:46 +00:00
brectanus
4602f7d908
Remove tabs from CHANGES.
2007-12-14 22:52:29 +00:00
brectanus
9136d391d3
Forgoten CHANGES entry for last commit.
2007-12-14 22:50:01 +00:00
brectanus
515290434c
Add 2.1.4 changes to trunk CHANGES.
2007-12-14 20:22:54 +00:00
brectanus
f68f0156c3
Cleanup CHANGES.
2007-12-14 20:20:18 +00:00
brectanus
5065852dfe
More efficient collection persistance and deletion on retrieval. See #345 and #426 .
2007-12-14 19:53:23 +00:00
brectanus
aa68fff104
Fixed decoding \9 with t:escapeSeqDecode. See #423 .
2007-12-14 00:30:25 +00:00
brectanus
8aa31fd099
Change jsDecodeuni to jsDecode which also decodes all the other JS escapes. See #193 .
2007-12-14 00:19:46 +00:00
brectanus
b0de659133
Added t:jsDecodeUni handling unicode similar to t:urlDecodeUni. See #193 .
2007-12-13 00:58:02 +00:00
brectanus
cbf79d43ba
Update version to ready for 2.5.0-rc1.
2007-12-12 23:08:14 +00:00
brectanus
54cac6461b
Add IS_NEW and IS_EXPIRED collection variables. See #345 .
2007-12-12 22:52:08 +00:00
brectanus
715a8eae58
Implement SecMarker. See #416 .
2007-12-11 17:53:50 +00:00
brectanus
a6c2d867f4
Improvements to audit logging matching rules. See #93 .
2007-11-30 21:31:12 +00:00
brectanus
dcdce0cbc5
Added matching rules to audit log data. See #93 .
2007-11-30 00:52:21 +00:00
ivanr
ff12e6f1c0
Remove comment that is not needed.
2007-11-29 18:10:54 +00:00
ivanr
526bcc0b5a
More informative change log message for fixing utf-8 validation.
2007-11-29 14:50:54 +00:00
ivanr
c5c759d6f0
Forgot to update CHANGES.
2007-11-29 14:03:05 +00:00
ivanr
575e86388a
Implemented SecRequestBodyNoFilesLimit ( #103 ).
2007-11-29 11:41:48 +00:00
ivanr
4a08d7e6bf
Handle out-of-disk-space conditions gracefully when writing to audit log.
2007-11-27 10:52:14 +00:00
brectanus
1860e2a35e
Renamed SecGeoLookupsDb to SecGeoLookupDB.
2007-11-26 17:04:42 +00:00
ivanr
6ca5b831fb
Document SecComponentSignature. Update CHANGES.
2007-11-26 16:22:33 +00:00
brectanus
e45ea12fc8
Fix warnings on Solaris and/or 64bit builds.
2007-11-02 22:31:47 +00:00
brectanus
8e99090067
Add the input filter if we have read the body (even if a sub-request). See #335 .
2007-10-17 22:41:37 +00:00
brectanus
9d49adf028
Basic implementation of skipAfter (still need to implement placeholders so it works with removed rules). See #258 .
2007-10-17 19:59:28 +00:00
brectanus
974298a76c
Added ctl:ruleRemoveById action. See #259 .
2007-10-17 19:11:47 +00:00
brectanus
b784e6cb73
Change from TX:LAST_MATCHED_VAR_NAME to MATCHED_VAR. See #123 .
2007-10-03 00:23:46 +00:00
brectanus
83a7886071
Now use memcmp() vs strncmp() in string comparison operators since we already short-circuit when the match will not fit in the target.
...
Added @containsWord. See #182 .
2007-10-02 18:50:35 +00:00
brectanus
da1399f0b8
Added TX:LAST_MATCHED_VAR_NAME. See #123 .
2007-10-01 22:35:52 +00:00
brectanus
9d4965b29e
Fix macro expansion in setvar. See #126 .
2007-10-01 17:24:10 +00:00
brectanus
fe1021e369
More cleanup of error messages and marking as relevant. See #4 .
2007-09-28 20:02:02 +00:00
brectanus
f3a8854fe9
Mark any error conditions/alerts as 'relevant'.
...
Clean up/add error messages where this can happen.
2007-09-27 21:18:23 +00:00
brectanus
5022ddcadf
Cleanup more subrequest code.
...
Do not run with subrequests in phase 3-4.
Still need to look at phase 5 to see what I can cleanup there.
See #135 .
2007-09-26 21:46:06 +00:00
brectanus
86c9a9bf1f
Cleanup CHANGES.
2007-09-26 21:39:45 +00:00
brectanus
72f8149338
Do not process subrequests in phase 2. See #135 .
2007-09-26 18:03:08 +00:00
brectanus
426ce1aea7
Fixed deprecatevar. See #59 .
2007-09-25 21:40:04 +00:00
ivanr
9ed3cf9e5a
Added support for partial response body processing.
2007-09-21 23:23:11 +00:00
ivanr
59333a6a81
Update CHANGES.
2007-09-21 22:15:12 +00:00
brectanus
eb6b456f5b
Fix potential buffer overrun by 1 byte in base64Decode caused by bad docs from APR-Util. See #255 .
2007-09-21 00:20:31 +00:00
brectanus
ad940d1ff9
Partially corrected the filter error code. See #3 .
2007-09-14 23:01:58 +00:00
brectanus
53011819d4
Cleanup some doc formatting.
...
Prepare trunk for use as 2.5.0-devN tree.
2007-09-14 21:41:34 +00:00
