Felipe Zimmerle
42a472adbd
Check if response body inspection is enabled before process it
2018-05-08 10:59:30 -03:00
Robert Paprocki
d0a63aac03
Define m_secmarker_skipped as an integer type
...
There's no reason to treat this this as a double, since it
represents a human-readable data value that is only meaningful
as an integer. In doing so we write cleaner audit logs and save
a small amount of space.
2018-04-24 11:49:13 -03:00
Robert Paprocki
f7beb17570
Fix broken @detectxss operator regression test
2018-04-23 22:11:00 -03:00
Andrei Belov
3d06e1b8b6
Fix github_issue reference in regression test
2018-04-23 22:09:03 -03:00
Andrei Belov
5e65d560f8
Fix utils::string::ssplit() to handle delimiter in the end of string
...
This closes #1743 .
2018-04-22 11:37:30 -03:00
Felipe Zimmerle
ff0d451a5c
Fix maxmind test case
2018-03-29 17:24:32 -03:00
Felipe Zimmerle
0ca5994744
Adds support for ctl:ruleRemoveByTag action
2018-03-26 17:01:53 -03:00
Andrei Belov
601e0d7040
Adjust tests for @inspectFile operator
2018-03-22 23:06:42 -03:00
Felipe Zimmerle
df169ea108
Adds support for libMaxMind
2018-03-22 19:11:42 -03:00
Victor Hora
22334c9bb6
Adds capture action to detectXSS
2018-03-12 22:10:56 -03:00
Felipe Zimmerle
70ace0faa4
Adds capture action to detectSQLi
2018-03-09 12:58:00 -03:00
Felipe Zimmerle
df25c48f53
Adds capture action to verifyCC
2018-03-09 11:26:24 -03:00
Felipe Zimmerle
77a885da5f
Adds capture action to verifySSN
2018-03-09 09:42:05 -03:00
Felipe Zimmerle
0b494c4cdc
Adds capture action to verifyCPF
2018-03-08 19:05:31 -03:00
Felipe Zimmerle
c8666fae31
Check for disruptive action on SecDefaultAction
2018-02-28 14:02:47 -03:00
Felipe Zimmerle
3539c59a67
Adds regression for base64 transformation
2018-02-23 10:46:28 -03:00
Felipe Zimmerle
e3b6b4ccff
Fix resource load on ip match from file
2018-02-22 21:23:20 -03:00
Felipe Zimmerle
de7c5c89bb
Using shared var for variables names
2018-02-20 13:40:01 -03:00
Felipe Zimmerle
a299997e02
Using run time string on the operators
2018-02-20 13:40:00 -03:00
Felipe Zimmerle
68152d8d29
Adds test case for issue #1576
2017-11-13 22:32:55 -03:00
Felipe Zimmerle
023e7acbad
Refactoring on the JSON parser
...
It also address the issue #1576 and #1577
2017-11-10 17:26:23 -03:00
Felipe Zimmerle
23cf656f93
Adds support to WEBAPPID variable
2017-11-08 10:28:56 -03:00
Felipe Zimmerle
082a3e3287
Adds support to SecWebAppID
2017-11-08 09:33:14 -03:00
Felipe Zimmerle
ec667a4609
Adds support for SecRuleRemoveByTag
2017-11-07 14:52:50 -03:00
Felipe Zimmerle
4d7fd5c30a
Adds support for update target by message
2017-11-06 23:29:25 -03:00
Felipe Zimmerle
7d7c0c03c5
Adds missing SecRuleScript test case
2017-11-06 23:27:00 -03:00
Felipe Zimmerle
7fa5ca9ba0
Makes lua optional
2017-11-06 00:44:54 -03:00
Felipe Zimmerle
cb3363c7d5
Adds support for the exec action
2017-11-05 23:31:07 -03:00
Felipe Zimmerle
7bec78a5a5
Adds support for transformations inside Lua engine
2017-11-05 23:31:07 -03:00
Felipe Zimmerle
a676f313c3
Initial support for Lua script engine
2017-11-05 23:30:50 -03:00
Felipe Zimmerle
1866a3a9eb
Adds support for the @inspectFile operator
2017-10-31 09:59:17 -03:00
Felipe Zimmerle
9369efcb90
Adds support to the collection RESOURCE
2017-10-30 09:07:49 -03:00
Felipe Zimmerle
e6106ae0eb
Fix regression tests for fuzzyHash
2017-10-27 14:47:04 -03:00
Felipe Zimmerle
7622866f97
Adds support for @fuzzyHash
...
Issue #997
2017-10-26 17:44:17 -03:00
Felipe Zimmerle
93e18ca5ea
Support pipes inside quoted variable selection
...
As of #1591 the pipe support was disable in the general selection which
was also affecting the quoted selection. This pactch adds the support
for pipes inside the quoted selection only.
2017-10-20 11:02:42 -03:00
Felipe Zimmerle
30797a458b
Parser: Pipes are no longer welcomed inside regex dict element selection.
...
Issue #1591
2017-10-17 11:46:44 -03:00
Felipe Zimmerle
1518c43d61
Adds test case for issue #1565
2017-10-11 23:19:20 -03:00
asterite
10c4f9b1b2
add a test for macro expansion in @rx
2017-10-06 20:30:04 +00:00
Felipe Zimmerle
210e72aa21
Consideres under quote variable while loading the rules
2017-10-06 20:25:20 +00:00
Felipe Zimmerle
9069a453e5
Revert "Treating ARGS_NAMES as an array instead of scalar"
...
This reverts commit 1d3c4c670db1bb475c83cd2f24455bb5bd6ee6a4.
2017-08-24 00:10:42 -03:00
Felipe Zimmerle
1d3c4c670d
Treating ARGS_NAMES as an array instead of scalar
...
Both value and key are the same.
2017-08-22 18:26:56 -03:00
asterite
58872e7eda
adds a test for validateByteRange with bytes > 127
2017-08-20 20:07:54 -03:00
Lasse Karstensen
7665d96a13
Improve action-allow test titles
2017-08-20 20:00:28 -03:00
Lasse Karstensen
fc06915cc6
Extend RESPONSE_BODY test case.
2017-08-20 20:00:07 -03:00
asterite
b8789ab9f4
add a test for negated implicit @rx operator
2017-08-20 19:39:18 -03:00
Felipe Zimmerle
b4051246b1
Adds support to SecResponseBodyMimeTypesClear
2017-08-16 22:21:03 -03:00
Felipe Zimmerle
56baef5f1f
Fix test case as consequence of the changes at #1514
2017-07-28 22:24:21 -03:00
Felipe Zimmerle
0242646610
Adds test case for the ctl:ruleEngine action
2017-07-27 22:10:58 -03:00
Felipe Zimmerle
337216fd87
fix: remove target by {id,tag} are now considering collections
...
Fix issue #1409
2017-07-25 09:19:21 -03:00
Felipe Zimmerle
e14dc602e5
Adds support to SecRuleUpdateTargetById
2017-07-04 13:13:13 -07:00
