github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-14 13:56:01 +03:00
Code Issues Packages Projects Releases Wiki Activity
555 Commits 55 Branches 109 Tags
Commit Graph

417 Commits

Author SHA1 Message Date
b1v1r
48981bb7c8 Merge in changes from 2.5.x branch. 2009-05-16 04:51:25 +00:00
b1v1r
5fcca65fca Merge 2.5.x build changes back to trunk. 2009-04-22 17:41:33 +00:00
b1v1r
f905bf083f Cleanup the API examples and add more docs. 2009-03-31 17:09:05 +00:00
b1v1r
dc0a2161ac Merge 2.5.9 changes into trunk. 2009-03-12 15:31:10 +00:00
b1v1r
fa96c349e5 Merge 2.5 changes. 2009-03-05 21:50:55 +00:00
b1v1r
a06d8f8ce7 Fixed strict compiler warnings for mlogc. 
Updated mlogc copyright year.
 2009-02-18 18:53:12 +00:00
b1v1r
bef5c53c09 Removed "make -C ..." in favor of a more portable method. 
Added verbose output option to configure.
 2009-02-18 18:01:39 +00:00
(no author)
4a336dadf2 Removed an invalid "Internal error" message forcing auditing of a request (MODSEC-29). 
Cleaned up error messages prior to using send_error_bucket().
 2008-10-21 17:45:18 +00:00
brectanus
c3c822ea01 Revert r1205 as it was fixed in mod_jk upstream. 2008-09-17 16:54:31 +00:00
brectanus
3848ff5b36 Worked around mod_jk issue where a 401 response was not including the WWW-Authentication header (MODSEC-16). 2008-09-15 19:51:06 +00:00
brectanus
67c48bfdfb Added ability to use ctl:requestBodyAccess=off in phase:1 to avoid limit check. 
Added regression tests for this as well.
 2008-09-10 19:45:13 +00:00
brectanus
c5e258f0ba Added additional check for XML well formed. 2008-09-10 18:32:24 +00:00
brectanus
b2c7424a96 Added a comment. 2008-09-10 17:39:18 +00:00
brectanus
309510d70b Change from ctl:requestBodyBuffering to ctl:forceRequestBodyVariable. 2008-09-10 17:11:20 +00:00
ivanr
5740f7a3eb Tidy up. 2008-09-10 14:15:37 +00:00
ivanr
2ee69ce468 Document css_inplace_decode(). 2008-09-10 12:44:41 +00:00
ivanr
2f7ff8f7ab Tidy up. 2008-09-10 11:34:16 +00:00
brectanus
f20059b009 Make sure we fail to validate DTD/schema after a parsing error. Fixes MODSEC-5. 2008-09-03 22:16:42 +00:00
brectanus
f5af5ef429 Remove declaration of an unused variable. 2008-09-03 21:20:06 +00:00
brectanus
34798e9abe Allow ability to force request body buffering to memory. Fixes MODSEC-2. 2008-09-03 20:42:28 +00:00
brectanus
deb6a816b4 Fixed MODSEC-2 by using the msr->hostname (ap_get_server_name(r)) vs r->hostname in the log. 2008-09-02 23:43:15 +00:00
brectanus
20cc395510 Added mlogc source. 2008-09-02 23:10:36 +00:00
ivanr
2818e66a95 Tidy up the code for the performance-measurement mode. Remove the per-phase measurements, which don't seem to work (at least not in my case). 2008-09-01 09:38:30 +00:00
ivanr
acec75be45 Make PERFORMANCE_MEASUREMENT more accurate by removing stray msr_log() invocation. Clean the code a bit. 2008-08-29 16:09:59 +00:00
brectanus
a686b0633a Update configure to better find lua libs. 2008-08-18 16:00:29 +00:00
brectanus
ab5cd92618 Update a regression test due to changed error message. 2008-08-15 21:04:12 +00:00
brectanus
7eef5ce7ae Update test stup with new msr_log_* wrappers. 2008-08-15 20:45:28 +00:00
brectanus
225339525d Allow disabling processing of request body size limit in phase 1. See #518. 2008-08-15 20:21:25 +00:00
brectanus
5298e29540 Added XML warn/error output to debug log. See #519. 2008-08-15 19:58:02 +00:00
brectanus
458fe8423c Add parity transformations. See #516. 2008-08-14 23:49:39 +00:00
brectanus
94370b2c76 Update default action in unit test stub. 2008-08-14 23:43:18 +00:00
brectanus
bb2e4b9a3e Fix cssDecode. See #512. 2008-08-14 23:37:40 +00:00
brectanus
5f648db898 Updated regression suite to use full path to LoadModule. 2008-08-08 22:50:47 +00:00
brectanus
10713fbd37 Sync up branches/2.5.x and trunk. 2008-07-31 22:36:24 +00:00
brectanus
7899b5c6e0 Update licensing. 2008-07-29 15:38:32 +00:00
brectanus
6a33fedc81 Regression suite cleanup merged from 2.5.x. 2008-07-29 05:50:03 +00:00
brectanus
478389d5a4 Added regression tests for ctl:ruleRemoveById and disruptive actions in DetectionOnly mode. 2008-07-22 17:03:30 +00:00
ivanr
ae40b8c213 Implemented cssDecode. 2008-07-16 13:08:12 +00:00
brectanus
326208d02c Newer apaches default to text/plain instead of null. 
Make matching files a bit more robust.
 2008-06-16 17:20:50 +00:00
brectanus
21f305095c Fixed warning for mixed CRLF/LF lines and LF lines in changeset:1070. See #504. 2008-06-05 18:03:20 +00:00
brectanus
0b1e2d674a Fix a minor typo in a comment. 2008-06-05 17:01:42 +00:00
brectanus
d9ba0e98b2 Fixed a typo from changeset:1072. See #498. 2008-06-05 16:52:22 +00:00
brectanus
493e71a9ec Tweak some regression tests. 2008-06-05 16:44:18 +00:00
ivanr
e1e200c005 Disabled phase 5 after interception by mistake. Fixed 2008-06-05 14:57:05 +00:00
ivanr
c3fd0231d0 Prevent phases from being processed more than once. 2008-06-05 14:52:48 +00:00
ivanr
b2119411dd Minor code cleanup. 2008-06-05 14:00:28 +00:00
ivanr
81d98de283 Log strict multipart errors at level 4. 2008-06-05 13:52:30 +00:00
brectanus
83ff6c4796 Re-enable error output filter with a fix after more testing/tracing of code. See #498. 
Update versions to ready for release of 2.5.5.
 2008-06-03 20:28:05 +00:00
brectanus
230837d4a3 Update/reorg some regression tests. 2008-06-03 20:24:14 +00:00
brectanus
16acbe4949 Fixed issue where logging was not occuring unless "auditlog" was enabled. See #497, #4, #451 and #445. 2008-06-02 23:34:31 +00:00