Felipe Zimmerle
c43391072c
Fix some issues reported by the static analysis
2016-03-18 19:37:51 -03:00
Felipe Zimmerle
ed8b0c85d7
Fix `capture' memory management
...
The capture action was implemented before the transaction concept.
While partially ported to use the transaction, some of the elements
were not freed correctly. Now it is fully ported to use the class
Transaction.
2016-02-16 23:24:15 -03:00
Felipe Zimmerle
8143f8ea89
Adds support to the action `maturity'
2016-02-10 13:55:12 -03:00
Felipe Zimmerle
714df8db20
Adds support to the action `accuracy'
2016-02-10 13:35:02 -03:00
Felipe Zimmerle
5a2a81a568
Adds support to the action `ver'
2016-02-10 12:53:22 -03:00
Felipe Zimmerle
77900ed4e2
Fix rules `messages' on the auditlog
2016-02-10 12:03:52 -03:00
Felipe Zimmerle
9474373264
General improvements on audit logs information
...
Making actions: msg, logdata, tag and others to work in the same
fashion that they work on ModSecurity v2.x
2016-02-05 15:19:53 -03:00
Felipe Zimmerle
b46dc34573
Temporarily disable the HTML ENTITY DECODE transformation
2016-01-18 13:48:00 -03:00
Felipe Zimmerle
4db5cc7d26
Refactoring on Transaction class: adding comments and renaming variables
2016-01-14 12:02:59 -03:00
Felipe Zimmerle
a51e707517
Renames class Assay to Transaction
2016-01-13 15:57:00 -03:00
Felipe Zimmerle
3acc013e49
Improves the secrules parser
2016-01-11 17:50:35 -03:00
Felipe Zimmerle
dd35b47764
Removes initcol debug messages
2016-01-06 17:00:43 -03:00
Felipe Zimmerle
913e22a77d
Adds initial support to initcol action
2015-12-22 12:10:15 -03:00
Felipe Zimmerle
fb3696ac04
Fix a few things to provide an easy interface for script bindings
2015-12-22 11:53:36 -03:00
Felipe Zimmerle
42ce0475b2
Coding style: changes the namespace in the comments
2015-12-10 13:20:32 -03:00
Felipe Zimmerle
b5a43871e6
Changes library namespace from ModSecurity to modsecurity
2015-12-01 10:55:59 -03:00
Felipe Zimmerle
de79848285
Code cosmetics
2015-11-18 12:59:08 -03:00
Felipe Zimmerle
c204f1f003
test: Increases the cache size of the urldecode transformation
2015-11-05 14:18:24 -03:00
Felipe Zimmerle
45638ccc91
Limit the amount of transformations inside the cache storage
2015-11-04 16:20:31 -03:00
Felipe Zimmerle
2ee5d4ca8f
Testing performance enhancements by enabling transformations cache
...
Also reduce the utilization of dynamic cast.
2015-11-04 00:28:04 -03:00
Felipe Zimmerle
b6ae0585cd
Refactoring: Place m_variables inside Collections
2015-10-29 13:46:45 -03:00
Felipe Zimmerle
787be98122
Refactoring: Pass all the control over the variables to the Variables class
2015-10-28 20:53:19 -03:00
Felipe Zimmerle
7afc07914f
Cosmetics: Fix static analysis warnings
2015-10-27 13:58:32 -03:00
Felipe Zimmerle
11a1045f47
Adds support to capture this fingerprint of the detectSQLi operator
2015-10-27 10:40:35 -03:00
Felipe Zimmerle
93031d93d0
Cosmetics: Fix coding style issues
2015-10-27 10:21:14 -03:00
Felipe Zimmerle
4168ebc2b3
Adds support to EscapeSeqDecode transformation
2015-10-23 14:22:03 -03:00
Felipe Zimmerle
1716add77b
Adds support to replaceNulls transformation
2015-10-23 14:05:42 -03:00
Felipe Zimmerle
9932478705
Adds support to hexDecode transformation
2015-10-23 14:01:12 -03:00
Felipe Zimmerle
93c3bc804e
Adds hexEncode transformation
2015-10-23 13:35:23 -03:00
Felipe Zimmerle
0ae09201f5
Adds support to replaceComments transformation
2015-10-23 13:05:08 -03:00
Felipe Zimmerle
7e826633f1
Adds support to the transformation normalisePath and normalisePathWin
2015-10-23 11:23:53 -03:00
Felipe Zimmerle
7ab75ac015
Adds support to length transformation
2015-10-23 11:02:31 -03:00
Felipe Zimmerle
8d78952e18
Fix jsDecode transformation
2015-10-23 10:58:17 -03:00
Felipe Zimmerle
3331744175
Fix cssDecode transformation
2015-10-23 10:56:51 -03:00
Felipe Zimmerle
743fb651da
Adds partially support to t:sha1 transformation
2015-10-23 10:53:54 -03:00
Felipe Zimmerle
91d29d2849
Adds support to urlEncode transformation
2015-10-22 20:47:02 -03:00
Felipe Zimmerle
e3e8bac138
Adds support to URL decode transformation
2015-10-22 17:20:31 -03:00
Felipe Zimmerle
0227fe9d6c
Adds support to t:compressWhitespace
2015-10-21 19:42:14 -03:00
Felipe Zimmerle
3d2ec2a3f5
Fix unit test utility to get it working with t:removeNulls
2015-10-21 16:05:07 -03:00
Felipe Zimmerle
17faef565e
Adds support for trim, left and right trim
2015-10-21 14:07:20 -03:00
Felipe Zimmerle
59af8ab842
Cosmetics: fixed the coding style
2015-10-20 16:05:50 -03:00
Felipe Zimmerle
827b15f5c9
Marks redirect action as disruptive
2015-10-19 23:04:33 -03:00
Felipe Zimmerle
3351338551
Performance improvement of setVar action
2015-10-15 14:03:43 -03:00
Felipe Zimmerle
0087a602f1
Fix phases execution
2015-09-30 18:48:38 -03:00
Felipe Zimmerle
8255ce86ca
Adds reference to filename and line number to lexer errors
2015-09-30 14:36:33 -03:00
Felipe Zimmerle
b497091017
Cosmetics: Fix coding style
2015-09-28 16:32:59 -03:00
Felipe Zimmerle
076a02951c
Huge performance improvement: passing variables as pointers avoiding copies
2015-09-18 20:21:12 -03:00
Felipe Zimmerle
ed86c24df6
Adds checks for the NO_LOGS definition and improved the vars resolution time
2015-09-17 17:41:38 -03:00
Felipe Zimmerle
11e1a67d58
Fix disruptive action flow while RuleEngine is in DetectionOnly
2015-09-17 10:51:44 -03:00
Felipe Zimmerle
490ad23e41
Uses macro expansion before apply redirect action
2015-09-17 09:30:39 -03:00
