Felipe Zimmerle
1353403c93
Adds support to the HtmlEntityDecode transformation
2015-08-05 17:20:53 -03:00
Felipe Zimmerle
ce298165dd
Adds support to the cssDecode transformation
2015-08-05 16:47:30 -03:00
Felipe Zimmerle
1924b4ebca
Adds lowercase transformation
2015-08-05 14:48:28 -03:00
Felipe Zimmerle
391002c665
Adds support for jsDecode transformation
2015-08-05 14:41:43 -03:00
Felipe Zimmerle
4f47651a6f
Adds variable TX and action "capture".
2015-08-05 10:07:47 -03:00
Felipe Zimmerle
be4a0cb41c
Adds REQUEST_COOKIES and REQUEST_COOKIES_NAMES variables
2015-08-04 17:57:09 -03:00
Felipe Zimmerle
0720fd4790
Adds operator @pmFromFile and @pmF
2015-08-04 14:27:14 -03:00
Felipe Zimmerle
57ceef1fe6
Update test cases submodule
2015-08-04 14:26:55 -03:00
Felipe Zimmerle
d4dd9c86d4
Accepts Suricata format on @pm operator
2015-08-04 14:26:37 -03:00
Felipe Zimmerle
95efb99a8c
Adds support to the @pm operator
2015-08-04 14:25:48 -03:00
Felipe Zimmerle
774d897351
Adds support to the operator @ipMatchFromFile and @ipMatchF
2015-08-03 17:21:41 -03:00
Felipe Zimmerle
6cd4c0492a
Adds support to the Rx operator
2015-08-03 14:24:17 -03:00
Felipe Zimmerle
3a4cef6fb1
cosmetic: Fix ValidateByteRange coding style.
2015-08-03 13:45:13 -03:00
Felipe Zimmerle
8575c10781
unit-test: Fix the geoip debug code
2015-08-03 13:45:13 -03:00
Felipe Zimmerle
17f88f5821
Using libpcre instead of c++11 regex
2015-08-03 13:45:09 -03:00
Felipe Zimmerle
2f4d4691c9
Disables @containsWord operator to enable the libpcre migration
2015-08-02 22:15:13 -03:00
Felipe Zimmerle
a4cf218a3e
Removes chrono references to make it compile with gcc 4.8.x
2015-08-02 22:14:32 -03:00
Felipe Zimmerle
933ade596c
Cosmetics: 1st paragraph of README file is now with lines smaller than 80 chars
2015-07-31 03:50:27 -03:00
Felipe Zimmerle
7ff38e9018
Temporarily disable Geo Lookup logs to avoid crash on unit tests
2015-07-31 03:09:54 -03:00
Felipe Zimmerle
f811ec6518
Adds support to @ipMatch operator
2015-07-30 20:58:19 -03:00
Felipe Zimmerle
bf0169b528
unit-tests: Releases operator after use
2015-07-30 20:22:19 -03:00
Felipe Zimmerle
a05fa8287b
Adds support to the validateByteRange operator
2015-07-27 22:44:42 -03:00
Felipe Zimmerle
c2d33823f5
Adds method init to Operator class
2015-07-27 22:44:34 -03:00
Felipe Zimmerle
7b4554216e
Adds support to the operator le
2015-07-27 16:19:26 -03:00
Felipe Zimmerle
606f03be43
Adds support to the operator gt
2015-07-27 16:17:34 -03:00
Felipe Zimmerle
235bf9c010
Adds support to the operator gt
2015-07-27 16:15:34 -03:00
Felipe Zimmerle
170cb60c82
Adds support to the @streq operator
2015-07-27 16:12:04 -03:00
Felipe Zimmerle
35901c1ebe
Adds support to the operator ge
2015-07-27 16:07:39 -03:00
Felipe Zimmerle
4462fd84ec
Adds support to negative on the contains operator
2015-07-27 16:05:02 -03:00
Felipe Zimmerle
f41f9e1f0d
Adds "negation" property to the operators signature
2015-07-27 15:56:38 -03:00
Chaim Sanders
2f3a8f0880
Updated wording and grammer in README
2015-07-27 00:43:14 -03:00
Felipe Zimmerle
6beca48c54
Fix C api signatures
2015-07-27 00:41:56 -03:00
Felipe Zimmerle
e016b72a8e
Handles better the memory utilization
...
- Added reference counts to Rule and AuditLog;
- Some memory leaks were removed, including GeoLookup;
- Deal better with parser errors;
- Overriding the AutlogLogWritter destructor.
2015-07-26 22:51:57 -03:00
Felipe Zimmerle
0e7c13e3c0
Adds more regression tests to SecRemoteRules
2015-07-25 08:18:59 -03:00
Felipe Zimmerle
7ba5c76c78
Returns elegant errors if rules load operation failed
2015-07-25 03:04:57 -03:00
Felipe Zimmerle
b8f7fb441d
Adds support to SecRemoteRules and Include directives
...
This commit includes a refactoring on important pieces of the parser
to allow it work in a stack fashion. Driver and Rules classes were
simplified and the RulesProperties class was created.
2015-07-24 22:57:29 -03:00
Felipe Zimmerle
ec9a97324f
Fix actions: returning string copy after evaluation
2015-07-24 18:49:36 -03:00
Felipe Zimmerle
b2bbe24e29
Process the request body even if there is nothing to be done
2015-07-24 18:49:30 -03:00
Felipe Zimmerle
76b34af357
Adds support to load remote rules
2015-07-23 14:40:56 -03:00
Felipe Zimmerle
70bc15cb73
Adds support to quoted ID action
2015-07-23 14:14:19 -03:00
Felipe Zimmerle
64543e3aa2
Using A-Z instead of A-z while parsing with ?i: to avoid warnings
2015-07-23 09:45:25 -03:00
Felipe Zimmerle
b5ca607e76
Places class Driver under the Parser namespace
2015-07-23 01:37:15 -03:00
Felipe Zimmerle
9c2158958e
parser: Loads content straight from buffer.
2015-07-23 01:37:08 -03:00
Felipe Zimmerle
d3eb0fd913
Driver class is extending the Rules class instead of duplicate elements
2015-07-23 00:10:32 -03:00
Felipe Zimmerle
dc0b13ad74
Cosmetic: fix copyright header
2015-07-22 23:03:09 -03:00
Felipe Zimmerle
16bb253d0e
Adds all variables to the 'Variables' name space
2015-07-22 22:36:30 -03:00
Felipe Zimmerle
261ee9f115
Adds support to BodyLimitAction and support for parser errors
2015-07-22 21:31:58 -03:00
Felipe Zimmerle
30b2624ec5
Adds support to parser error
2015-07-22 21:29:15 -03:00
Felipe Zimmerle
5b3fd479fc
regression: better format errors, making easy to read the output
2015-07-22 21:29:06 -03:00
Felipe Zimmerle
3f883df763
regression: Sorts test cases by file, making easy to read
2015-07-22 21:28:58 -03:00