464 Commits

Author SHA1 Message Date
Felipe Zimmerle
dd35b47764 Removes initcol debug messages 2016-01-06 17:00:43 -03:00
Felipe Zimmerle
decf04d264 Adds support to SecResponseBodyMimeType 2015-12-24 11:55:24 -03:00
Felipe Zimmerle
c2d9a153cb Adds support to afl fuzzer in the build system 2015-12-23 00:27:30 -03:00
Felipe Zimmerle
913e22a77d Adds initial support to initcol action 2015-12-22 12:10:15 -03:00
Felipe Zimmerle
fb3696ac04 Fix a few things to provide an easy interface for script bindings 2015-12-22 11:53:36 -03:00
Felipe Zimmerle
ac10d8863c Changes the operator evaluate method to only support two arguments
Second argument can be empty if there is not need for it.
2015-12-22 11:53:31 -03:00
Felipe Zimmerle
215c4d1071 Fix ARGS_POST and ARGS_GET variables order on the parser 2015-12-11 09:26:01 -03:00
Felipe Zimmerle
42ce0475b2 Coding style: changes the namespace in the comments 2015-12-10 13:20:32 -03:00
Felipe Zimmerle
80b82d3707 Adds the Global LDADD option and fed according to the platform 2015-12-01 17:34:18 -03:00
Felipe Zimmerle
467c977afc Fix compilation without the GeoIP headers installed on the system 2015-12-01 15:27:14 -03:00
Felipe Zimmerle
854ca4c1cd Removes libinjection sources from the main project and add it as subfolder
That way we can control the CFLAGS that will be sent to libinjection.
Avoiding, for instance, the utilization of c++11 on libinjection c code.
2015-12-01 11:21:28 -03:00
Felipe Zimmerle
ea636e80ee Clarifies conditional by placing its parts into parentheses 2015-12-01 10:56:50 -03:00
Felipe Zimmerle
b5a43871e6 Changes library namespace from ModSecurity to modsecurity 2015-12-01 10:55:59 -03:00
Felipe Zimmerle
fbf8ea74f3 Makes YAJL dependency to be optional 2015-11-24 16:03:33 -03:00
Felipe Zimmerle
09a958544d Makes @geoLookup optional depending on the availability of libGeoIP 2015-11-20 11:09:05 -03:00
Felipe Zimmerle
de79848285 Code cosmetics 2015-11-18 12:59:08 -03:00
Andrew Hutchings
c035e76ede Avoid segfault if parser `ref' is empty 2015-11-17 11:28:47 -03:00
Andrew Hutchings
f65b08b066 Fix parser to accept redirect action without single quote 2015-11-17 11:08:39 -03:00
Ivan Prokhorov
7a300eb945 Fix pcre cflags variable and adds LDFLAGS for dependencies 2015-11-16 09:15:38 -08:00
Felipe Zimmerle
47233adf3b Revert "Adds experimental operator cache"
This reverts commit 326696976fe0bb0f536a910d0038e8fe8bbdaa34.
2015-11-16 09:15:31 -08:00
Felipe Zimmerle
326696976f Adds experimental operator cache 2015-11-06 10:46:46 -03:00
Felipe Zimmerle
c204f1f003 test: Increases the cache size of the urldecode transformation 2015-11-05 14:18:24 -03:00
Felipe Zimmerle
bb30d42b57 Speed up the random number generation 2015-11-05 14:16:26 -03:00
Felipe Zimmerle
45638ccc91 Limit the amount of transformations inside the cache storage 2015-11-04 16:20:31 -03:00
Felipe Zimmerle
5bef19aa4d Variables resolution results now stored into a std::vector instead of std::list 2015-11-04 15:51:22 -03:00
Felipe Zimmerle
2ee5d4ca8f Testing performance enhancements by enabling transformations cache
Also reduce the utilization of dynamic cast.
2015-11-04 00:28:04 -03:00
Felipe Zimmerle
e641c3cc17 Huge improve in the variables resolution time 2015-11-03 22:44:59 -03:00
Felipe Zimmerle
4a771f8c2c Fix pkginclude_HEADERS 2015-10-30 18:59:14 -03:00
Felipe Zimmerle
48704c27a9 Removes some memory leaks 2015-10-30 18:59:08 -03:00
Felipe Zimmerle
061ba0131a Refactoring: Create class Collection to hold collection properties 2015-10-29 14:38:04 -03:00
Felipe Zimmerle
b6ae0585cd Refactoring: Place m_variables inside Collections 2015-10-29 13:46:45 -03:00
Felipe Zimmerle
787be98122 Refactoring: Pass all the control over the variables to the Variables class 2015-10-28 20:53:19 -03:00
Felipe Zimmerle
6f617e6ca8 Refactoring: Move Variables and Variable to independent files 2015-10-28 14:34:00 -03:00
Felipe Zimmerle
776502e021 Refactoring: changes ModSecurityStringVar to transaction::Variable
Having the variables and collection in place before start to implement
persistent storage.
2015-10-28 13:53:07 -03:00
Felipe Zimmerle
7afc07914f Cosmetics: Fix static analysis warnings 2015-10-27 13:58:32 -03:00
Felipe Zimmerle
11a1045f47 Adds support to capture this fingerprint of the detectSQLi operator 2015-10-27 10:40:35 -03:00
Felipe Zimmerle
93031d93d0 Cosmetics: Fix coding style issues 2015-10-27 10:21:14 -03:00
Felipe Zimmerle
2a062b7fe2 Not using pcrecpp on verifycc anymore 2015-10-27 08:55:04 -03:00
Felipe Zimmerle
4168ebc2b3 Adds support to EscapeSeqDecode transformation 2015-10-23 14:22:03 -03:00
Felipe Zimmerle
1716add77b Adds support to replaceNulls transformation 2015-10-23 14:05:42 -03:00
Felipe Zimmerle
9932478705 Adds support to hexDecode transformation 2015-10-23 14:01:12 -03:00
Felipe Zimmerle
93c3bc804e Adds hexEncode transformation 2015-10-23 13:35:23 -03:00
Felipe Zimmerle
0ae09201f5 Adds support to replaceComments transformation 2015-10-23 13:05:08 -03:00
Felipe Zimmerle
7e826633f1 Adds support to the transformation normalisePath and normalisePathWin 2015-10-23 11:23:53 -03:00
Felipe Zimmerle
7ab75ac015 Adds support to length transformation 2015-10-23 11:02:31 -03:00
Felipe Zimmerle
8d78952e18 Fix jsDecode transformation 2015-10-23 10:58:17 -03:00
Felipe Zimmerle
3331744175 Fix cssDecode transformation 2015-10-23 10:56:51 -03:00
Felipe Zimmerle
743fb651da Adds partially support to t:sha1 transformation 2015-10-23 10:53:54 -03:00
Felipe Zimmerle
91d29d2849 Adds support to urlEncode transformation 2015-10-22 20:47:02 -03:00
Felipe Zimmerle
e3e8bac138 Adds support to URL decode transformation 2015-10-22 17:20:31 -03:00