1929 Commits

Author SHA1 Message Date
Felipe Zimmerle
1353403c93 Adds support to the HtmlEntityDecode transformation 2015-08-05 17:20:53 -03:00
Felipe Zimmerle
ce298165dd Adds support to the cssDecode transformation 2015-08-05 16:47:30 -03:00
Felipe Zimmerle
1924b4ebca Adds lowercase transformation 2015-08-05 14:48:28 -03:00
Felipe Zimmerle
391002c665 Adds support for jsDecode transformation 2015-08-05 14:41:43 -03:00
Felipe Zimmerle
4f47651a6f Adds variable TX and action "capture". 2015-08-05 10:07:47 -03:00
Felipe Zimmerle
be4a0cb41c Adds REQUEST_COOKIES and REQUEST_COOKIES_NAMES variables 2015-08-04 17:57:09 -03:00
Felipe Zimmerle
0720fd4790 Adds operator @pmFromFile and @pmF 2015-08-04 14:27:14 -03:00
Felipe Zimmerle
57ceef1fe6 Update test cases submodule 2015-08-04 14:26:55 -03:00
Felipe Zimmerle
d4dd9c86d4 Accepts Suricata format on @pm operator 2015-08-04 14:26:37 -03:00
Felipe Zimmerle
95efb99a8c Adds support to the @pm operator 2015-08-04 14:25:48 -03:00
Felipe Zimmerle
774d897351 Adds support to the operator @ipMatchFromFile and @ipMatchF 2015-08-03 17:21:41 -03:00
Felipe Zimmerle
6cd4c0492a Adds support to the Rx operator 2015-08-03 14:24:17 -03:00
Felipe Zimmerle
3a4cef6fb1 cosmetic: Fix ValidateByteRange coding style. 2015-08-03 13:45:13 -03:00
Felipe Zimmerle
8575c10781 unit-test: Fix the geoip debug code 2015-08-03 13:45:13 -03:00
Felipe Zimmerle
17f88f5821 Using libpcre instead of c++11 regex 2015-08-03 13:45:09 -03:00
Felipe Zimmerle
2f4d4691c9 Disables @containsWord operator to enable the libpcre migration 2015-08-02 22:15:13 -03:00
Felipe Zimmerle
a4cf218a3e Removes chrono references to make it compile with gcc 4.8.x 2015-08-02 22:14:32 -03:00
Felipe Zimmerle
933ade596c Cosmetics: 1st paragraph of README file is now with lines smaller than 80 chars 2015-07-31 03:50:27 -03:00
Felipe Zimmerle
7ff38e9018 Temporarily disable Geo Lookup logs to avoid crash on unit tests 2015-07-31 03:09:54 -03:00
Felipe Zimmerle
f811ec6518 Adds support to @ipMatch operator 2015-07-30 20:58:19 -03:00
Felipe Zimmerle
bf0169b528 unit-tests: Releases operator after use 2015-07-30 20:22:19 -03:00
Felipe Zimmerle
a05fa8287b Adds support to the validateByteRange operator 2015-07-27 22:44:42 -03:00
Felipe Zimmerle
c2d33823f5 Adds method init to Operator class 2015-07-27 22:44:34 -03:00
Felipe Zimmerle
7b4554216e Adds support to the operator le 2015-07-27 16:19:26 -03:00
Felipe Zimmerle
606f03be43 Adds support to the operator gt 2015-07-27 16:17:34 -03:00
Felipe Zimmerle
235bf9c010 Adds support to the operator gt 2015-07-27 16:15:34 -03:00
Felipe Zimmerle
170cb60c82 Adds support to the @streq operator 2015-07-27 16:12:04 -03:00
Felipe Zimmerle
35901c1ebe Adds support to the operator ge 2015-07-27 16:07:39 -03:00
Felipe Zimmerle
4462fd84ec Adds support to negative on the contains operator 2015-07-27 16:05:02 -03:00
Felipe Zimmerle
f41f9e1f0d Adds "negation" property to the operators signature 2015-07-27 15:56:38 -03:00
Chaim Sanders
2f3a8f0880 Updated wording and grammer in README 2015-07-27 00:43:14 -03:00
Felipe Zimmerle
6beca48c54 Fix C api signatures 2015-07-27 00:41:56 -03:00
Felipe Zimmerle
e016b72a8e Handles better the memory utilization
- Added reference counts to Rule and AuditLog;
- Some memory leaks were removed, including GeoLookup;
- Deal better with parser errors;
- Overriding the AutlogLogWritter destructor.
2015-07-26 22:51:57 -03:00
Felipe Zimmerle
0e7c13e3c0 Adds more regression tests to SecRemoteRules 2015-07-25 08:18:59 -03:00
Felipe Zimmerle
7ba5c76c78 Returns elegant errors if rules load operation failed 2015-07-25 03:04:57 -03:00
Felipe Zimmerle
b8f7fb441d Adds support to SecRemoteRules and Include directives
This commit includes a refactoring on important pieces of the parser
to allow it work in a stack fashion. Driver and Rules classes were
simplified and the RulesProperties class was created.
2015-07-24 22:57:29 -03:00
Felipe Zimmerle
ec9a97324f Fix actions: returning string copy after evaluation 2015-07-24 18:49:36 -03:00
Felipe Zimmerle
b2bbe24e29 Process the request body even if there is nothing to be done 2015-07-24 18:49:30 -03:00
Felipe Zimmerle
76b34af357 Adds support to load remote rules 2015-07-23 14:40:56 -03:00
Felipe Zimmerle
70bc15cb73 Adds support to quoted ID action 2015-07-23 14:14:19 -03:00
Felipe Zimmerle
64543e3aa2 Using A-Z instead of A-z while parsing with ?i: to avoid warnings 2015-07-23 09:45:25 -03:00
Felipe Zimmerle
b5ca607e76 Places class Driver under the Parser namespace 2015-07-23 01:37:15 -03:00
Felipe Zimmerle
9c2158958e parser: Loads content straight from buffer. 2015-07-23 01:37:08 -03:00
Felipe Zimmerle
d3eb0fd913 Driver class is extending the Rules class instead of duplicate elements 2015-07-23 00:10:32 -03:00
Felipe Zimmerle
dc0b13ad74 Cosmetic: fix copyright header 2015-07-22 23:03:09 -03:00
Felipe Zimmerle
16bb253d0e Adds all variables to the 'Variables' name space 2015-07-22 22:36:30 -03:00
Felipe Zimmerle
261ee9f115 Adds support to BodyLimitAction and support for parser errors 2015-07-22 21:31:58 -03:00
Felipe Zimmerle
30b2624ec5 Adds support to parser error 2015-07-22 21:29:15 -03:00
Felipe Zimmerle
5b3fd479fc regression: better format errors, making easy to read the output 2015-07-22 21:29:06 -03:00
Felipe Zimmerle
3f883df763 regression: Sorts test cases by file, making easy to read 2015-07-22 21:28:58 -03:00