Martin Vierula
46c1a0d62f
IIS: Update dependencies for next planned release
2022-08-26 11:35:43 -07:00
martinhsv
ed60de97e6
Merge pull request #2789 from martinhsv/v2/master
...
Fix a failing test.
2022-08-20 18:34:22 -04:00
Martin Vierula
159cb4e93c
Fix a failing test.
2022-08-20 15:24:37 -07:00
Martin Vierula
9cb9309fdd
Add CHANGES entries for recent merges
2022-06-08 15:55:25 -07:00
martinhsv
4136c4c46b
Merge pull request #2760 from martinhsv/v2/master
...
XML parser cleanup: NULL duplicate pointer
2022-06-08 18:41:21 -04:00
Martin Vierula
dfbdaf8f31
XML parser cleanup: NULL duplicate pointer
2022-06-08 15:36:36 -07:00
martinhsv
fc8e5586e7
Merge pull request #2239 from microsoft/fix_malformed_xml_memory_leak
...
Properly cleanup XML parser contexts upon completion
2022-06-08 17:45:53 -04:00
martinhsv
dd2d3f74b6
Merge pull request #2715 from vloup/memory-leak-fix-2208
...
Fix memory leak in streams
2022-06-07 17:10:22 -04:00
martinhsv
08c051987c
Merge branch 'v2/master' into memory-leak-fix-2208
2022-06-07 17:09:40 -04:00
martinhsv
5e1c1312a6
Merge pull request #2753 from martinhsv/v2/master
...
Fix: negative usec on log line when data type long is 32b
2022-06-07 13:41:40 -04:00
Martin Vierula
b5b4e2fdd1
Fix: negative usec on log line when data type long is 32b
2022-06-01 07:19:10 -07:00
Vincent Loup
bc8662b0d5
Fix memory leak in streams
2022-05-30 16:16:39 +02:00
martinhsv
03ec81d86f
Merge pull request #2749 from martinhsv/v2/master
...
mlogc log-line parsing fails due to enhanced timestamp
2022-05-27 14:09:41 -04:00
Martin Vierula
f71498ceff
mlogc log-line parsing fails due to enhanced timestamp
2022-05-27 11:05:37 -07:00
martinhsv
784693b61c
Merge pull request #2735 from martinhsv/v2/master
...
Allow no-key, single-value JSON body
2022-05-03 15:58:43 -04:00
Martin Vierula
4a98032b7f
Allow no-key, single-value JSON body
2022-05-03 12:34:03 -07:00
Martin Vierula
733427197e
Set SecStatusEngine Off in modsecurity.conf-recommended
2022-04-19 10:07:36 -07:00
martinhsv
1dd1c6defd
Merge pull request #2663 from martinhsv/v2/master
...
Fix memory leak that occurs on JSON parsing error
2021-12-29 10:03:45 -05:00
Martin Vierula
c6582df2e5
Fix memory leak that occurs on JSON parsing error
2021-12-29 06:46:25 -08:00
martinhsv
1d0ccc99c0
Merge pull request #2660 from martinhsv/v2/master
...
Multipart names may include single quote if double-quote enclosed
2021-12-22 14:23:32 -05:00
Martin Vierula
065dbe7e76
Multipart names may include single quote if double-quote enclosed
2021-12-22 10:37:03 -08:00
martinhsv
4fc4ba5c31
Merge pull request #2657 from martinhsv/v2/master
...
Add SecRequestBodyJsonDepthLimit to modsecurity.conf-recommended
2021-12-22 10:16:00 -05:00
Martin Vierula
60be05914c
Add SecRequestBodyJsonDepthLimit to modsecurity.conf-recommended
2021-12-21 06:30:28 -08:00
Martin Vierula
df4bffcdc8
IIS: Update dependencies for Windows build as of v2.9.5
2021-12-06 14:27:04 -08:00
Martin Vierula
860299971d
Version 2.9.5
2021-11-22 11:22:12 -08:00
martinhsv
683ba1f086
Merge pull request #2644 from martinhsv/v2/master
...
Support configurable limit on depth of JSON parsing
2021-11-18 20:49:28 -05:00
Martin Vierula
41918335fa
Support configurable limit on depth of JSON parsing
2021-11-18 17:35:40 -08:00
EarlRoth
199cf5da91
Update README.md
2021-09-13 16:30:50 -06:00
martinhsv
f379aa149f
Merge pull request #2593 from martinhsv/v2/master
...
Add commented-out sample rule to engage JSON Processor for more subtypes
2021-07-14 13:15:52 -04:00
martinhsv
8b2c869279
Add commented-out sample rule to engage JSON Processor for more subtypes
2021-07-12 09:29:38 -07:00
Felipe Zimmerle
b32cc1680c
Version 2.9.4
...
Increasing version to 2.9.4
2021-06-21 09:36:18 -03:00
Felipe Zimmerle
47a27fd3b7
iis: Having build scripts up2date
2021-06-21 09:36:10 -03:00
Felipe Zimmerle
29fd4a2856
Update README.md
2021-03-17 12:45:17 -03:00
Felipe Zimmerle
ba8119984a
CHANGES: Adds info on: #2095
2021-01-15 15:15:11 -03:00
Rainer Jung
f80114a906
Add microsec timestamp resolution to the formatted log timestamp.
2021-01-15 15:11:14 -03:00
Felipe Zimmerle
40b98970c4
CHANGES: Adds info on: #890 , #2049
2021-01-14 14:27:14 -03:00
John Lightsey
039b35029c
Fix other usage of the global pool for request temporaries in re_operators.c
2021-01-14 14:23:39 -03:00
John Lightsey
e419b50fe7
Store temporaries in the request pool for regexes compiled per-request.
...
The code for testing regexes with embedded Apache variables
(rule->re_precomp == 1) during request processing was utilizing the global
engine pool for the storage of temporary values. This approach is not
threadsafe, retains the temporary variables longer than they are usable,
and causes corruption of the global pool's "cleanups" linked-lists when
Apache is configured with a threaded MPM.
2021-01-14 14:23:39 -03:00
Vladimir Krivopalov
6a5ec1ff7b
Properly cleanup XML parser contexts upon completion
...
It is currently possible that the XML parsing context is not properly
cleaned up if a parsed XML document is malformed.
This fix makes sure that the context is taken care of.
Signed-off-by: Vladimir Krivopalov <vlkrivop@microsoft.com>
2020-01-14 11:15:33 -08:00
studersi
12cefbd70f
Adds a sanity check before use ctl:ruleRemove(TargetById|TargetByMsg)
...
This commit closes the issue #2033 .
2019-11-20 09:49:17 -03:00
Felipe Zimmerle
176276a931
Fix the order of error_msg validation
...
Reported by @marcstern at #2128
2019-07-10 14:52:46 -03:00
Felipe Zimmerle
28b4be670f
CHANGES: Adds info on: #2123 , #2124
2019-06-26 13:03:35 -03:00
emphazer
f7e4d01b01
added missing Geo Countries
2019-06-26 13:02:25 -03:00
Felipe Zimmerle
ca8e2db5a7
CHANGES: Adds info on: 2092
2019-05-27 14:45:50 -03:00
Rainer Jung
32e185c2ca
When the input filter finishes, check whether we returned data during the last read and if not, delegate to the remaining filter chain.
...
Without that, ProcessPartial for the request body breaks forwarding
of uploaded files using mod_proxy_ajp and mod_wl.
See issue #2091 .
2019-05-27 14:45:44 -03:00
Felipe Zimmerle
0d663616f7
CHANGES: Adds info on
2019-05-27 10:33:56 -03:00
Nao YONASHIRO
774ff40c96
fix: care non-null terminated chunk data
2019-05-27 10:29:01 -03:00
Felipe Zimmerle
52532a1bce
Fix curl callback function
2018-12-15 00:08:31 -03:00
Felipe Zimmerle
c08d3edb13
CHANGES: Adds info on #1957
2018-12-10 16:55:48 -03:00
Martin.Blapp
b90fa2d063
Use tempfiles for apr_global_mutex_create() to fix segfaults with Apache 2.2.
...
Call modsecurity_init() for the first invocation too.
2018-12-10 16:24:48 -03:00
