ivanr
|
b9defc0adb
|
Warn in the debug log when request body processing fails.
|
2007-11-08 18:20:24 +00:00 |
|
ivanr
|
cd2287a412
|
Fix for an evasion false positive.
|
2007-11-08 18:12:51 +00:00 |
|
brectanus
|
83fb4b4da4
|
Fix more formatting errors/warnings on 64bit systems.
|
2007-11-07 20:22:09 +00:00 |
|
brectanus
|
7f71ae377c
|
Fix another warning on %u used where %lu needed.
|
2007-11-07 20:00:26 +00:00 |
|
brectanus
|
e45ea12fc8
|
Fix warnings on Solaris and/or 64bit builds.
|
2007-11-02 22:31:47 +00:00 |
|
brectanus
|
faec5b8e9d
|
Fix a possible loss of data warning when compiling 64bit reported by Marc Stern.
|
2007-10-23 22:16:39 +00:00 |
|
brectanus
|
2b346dd086
|
Updated input filter insertion code for sub-requests.
|
2007-10-17 23:07:00 +00:00 |
|
brectanus
|
8e99090067
|
Add the input filter if we have read the body (even if a sub-request). See #335.
|
2007-10-17 22:41:37 +00:00 |
|
brectanus
|
9d49adf028
|
Basic implementation of skipAfter (still need to implement placeholders so it works with removed rules). See #258.
|
2007-10-17 19:59:28 +00:00 |
|
brectanus
|
974298a76c
|
Added ctl:ruleRemoveById action. See #259.
|
2007-10-17 19:11:47 +00:00 |
|
brectanus
|
9efa02f423
|
Change ctl parameters to be case insensitive.
Initial implementation of ctl:removeRuleById. See #259.
|
2007-10-16 00:14:42 +00:00 |
|
ivanr
|
f66e8c5b38
|
Document MULTIPART_CRLF_LF_LINES.
|
2007-10-15 18:27:42 +00:00 |
|
ivanr
|
b0d514478f
|
Fix blocking multipart FP, which affected Safari.
|
2007-10-15 18:05:12 +00:00 |
|
ivanr
|
d5f3b9ce52
|
Fix multipart parser blocking FP with Safari (
(#317).
|
2007-10-15 17:27:51 +00:00 |
|
brectanus
|
793b576701
|
Added support for MATCHED_VAR and MATCHED_VAR_NAME. See #123.
|
2007-10-15 16:50:36 +00:00 |
|
brectanus
|
b784e6cb73
|
Change from TX:LAST_MATCHED_VAR_NAME to MATCHED_VAR. See #123.
|
2007-10-03 00:23:46 +00:00 |
|
brectanus
|
83a7886071
|
Now use memcmp() vs strncmp() in string comparison operators since we already short-circuit when the match will not fit in the target.
Added @containsWord. See #182.
|
2007-10-02 18:50:35 +00:00 |
|
ivanr
|
a6cf7957be
|
Update ModSecurity chroot documentation.
|
2007-10-01 22:38:19 +00:00 |
|
brectanus
|
da1399f0b8
|
Added TX:LAST_MATCHED_VAR_NAME. See #123.
|
2007-10-01 22:35:52 +00:00 |
|
brectanus
|
e0e031d163
|
Oops, too fast to blame apr :) This bug was a forgotten NULL in the apr_pstrcat function. Apparently newer APRs can handle this.
|
2007-10-01 19:05:34 +00:00 |
|
brectanus
|
dc71842cee
|
Revert to apr_psprintf (vs apr_pstrcat) to get around what appears to be an apr bug with FC4.
|
2007-10-01 18:45:06 +00:00 |
|
brectanus
|
9d4965b29e
|
Fix macro expansion in setvar. See #126.
|
2007-10-01 17:24:10 +00:00 |
|
brectanus
|
2d526f1434
|
Fix typo in a comment.
|
2007-10-01 17:23:38 +00:00 |
|
brectanus
|
b661574973
|
Document the 'tag' action. See #276.
|
2007-09-28 22:16:37 +00:00 |
|
brectanus
|
27ba3027b7
|
Move init of msr->msc_rule_mptmp before msr storage.
|
2007-09-28 21:06:57 +00:00 |
|
brectanus
|
fe1021e369
|
More cleanup of error messages and marking as relevant. See #4.
|
2007-09-28 20:02:02 +00:00 |
|
brectanus
|
8b6f0e72a7
|
Wrap PERFORMANCE_MEASUREMENT variable as conditional compile.
|
2007-09-27 21:38:33 +00:00 |
|
brectanus
|
63a47c370e
|
Prefer %d string formatter to %i so we do not get warnings on some platforms.
|
2007-09-27 21:34:29 +00:00 |
|
brectanus
|
f3a8854fe9
|
Mark any error conditions/alerts as 'relevant'.
Clean up/add error messages where this can happen.
|
2007-09-27 21:18:23 +00:00 |
|
brectanus
|
5022ddcadf
|
Cleanup more subrequest code.
Do not run with subrequests in phase 3-4.
Still need to look at phase 5 to see what I can cleanup there.
See #135.
|
2007-09-26 21:46:06 +00:00 |
|
brectanus
|
86c9a9bf1f
|
Cleanup CHANGES.
|
2007-09-26 21:39:45 +00:00 |
|
brectanus
|
9f898a0e0b
|
Fixed comment.
|
2007-09-26 19:49:48 +00:00 |
|
brectanus
|
7c393c4874
|
Fixed the wrong status being displayed in the error page. See #3.
|
2007-09-26 19:47:06 +00:00 |
|
brectanus
|
72f8149338
|
Do not process subrequests in phase 2. See #135.
|
2007-09-26 18:03:08 +00:00 |
|
brectanus
|
426ce1aea7
|
Fixed deprecatevar. See #59.
|
2007-09-25 21:40:04 +00:00 |
|
ivanr
|
a1955d09e3
|
Add crude performance measurement.
|
2007-09-24 23:59:42 +00:00 |
|
ivanr
|
009c3b0fa1
|
Document SecResponseBodyLimitAction.
|
2007-09-21 23:37:56 +00:00 |
|
ivanr
|
9ed3cf9e5a
|
Added support for partial response body processing.
|
2007-09-21 23:23:11 +00:00 |
|
ivanr
|
59333a6a81
|
Update CHANGES.
|
2007-09-21 22:15:12 +00:00 |
|
ivanr
|
79ee3a6a79
|
Process debug log statements only if the debug log level is sufficiently high.
|
2007-09-21 19:46:53 +00:00 |
|
ivanr
|
dfe09ff1b0
|
Fix content injection C++ style comments.
|
2007-09-21 19:36:57 +00:00 |
|
ivanr
|
2a707d4370
|
Enable our output filters to intercept bodies of error responses (#65).
|
2007-09-21 19:06:54 +00:00 |
|
brectanus
|
eb6b456f5b
|
Fix potential buffer overrun by 1 byte in base64Decode caused by bad docs from APR-Util. See #255.
|
2007-09-21 00:20:31 +00:00 |
|
brectanus
|
b217e42624
|
Merge in fix for ErrorDocument.
|
2007-09-17 17:10:38 +00:00 |
|
brectanus
|
ad940d1ff9
|
Partially corrected the filter error code. See #3.
|
2007-09-14 23:01:58 +00:00 |
|
brectanus
|
53011819d4
|
Cleanup some doc formatting.
Prepare trunk for use as 2.5.0-devN tree.
|
2007-09-14 21:41:34 +00:00 |
|
brectanus
|
c8e5c7fcd5
|
Sync trunk from branches/2.1.x (merge in branch fixes).
|
2007-09-14 21:00:56 +00:00 |
|
brectanus
|
8a54517f0d
|
Updated copyright dates in xsl files. See #253.
|
2007-09-12 19:04:54 +00:00 |
|
brectanus
|
1e603d8a3e
|
Detect and use new API calls to get the server version/banner when available.
|
2007-09-11 18:01:28 +00:00 |
|
brectanus
|
8549546b5e
|
Add a cast to unsigned char * to avoid warning.
|
2007-09-11 17:59:14 +00:00 |
|