Eduardo Arias
10c6ee726f
Added support for expandEnv, createDir & cpu_seconds on Windows
...
- expandEnv on Windows uses POCO C++ Libraries implementation of Glob
- Paths of matched files are adjusted to preserve UNIX path
separators for consistency with the rest of the code.
- Minor change to code shared with other platforms that removes
allocation of std::ifstream on the heap to check whether the file can
be opened, which can be done with local stack variable that closes
the file when out of scope.
- createDir uses _mkdir on Windows, which doesn't support configuring
the new directory's mode.
- added public domain implementation of clock_gettime for clock_id
CLOCK_PROCESS_CPUTIME_ID from mingw-w64's winpthreads to support
cpu_seconds on Windows.
- Updated included headers to support compilation on Windows (using
Visual C++)
2024-05-03 23:05:34 -03:00
Eduardo Arias
ebf1f8fd28
On Windows use the operating system's native CA store for certificate verification of https requests.
...
- Updated included headers to support compilation on Windows (using
Visual C++)
2024-05-03 23:05:34 -03:00
Eduardo Arias
91a736692a
Minor changes to debug_log_writer
...
- Removed unused m_first data member.
- Explicitly delete copy constructor and assignment operator.
- Removed unused included headers.
2024-05-03 23:05:34 -03:00
Eduardo Arias
373633ffe2
mkstemp is not available in Windows build, replaced with _mktemp_s plus _open.
...
- Updated included headers to support compilation on Windows (using
Visual C++)
- Minor change to use C++ default (zero) initialization instead of
calling memset.
2024-05-03 23:05:34 -03:00
Eduardo Arias
35949179a4
setenv is not available in Windows build, replaced with _putenv_s
2024-05-03 23:05:34 -03:00
Eduardo Arias
abbd7b2f42
Replaced usage of apr_snprintf with snprintf (already in Windows exclusive code block)
...
- updated included headers to support compilation on Windows (using
Visual C++)
2024-05-03 23:05:34 -03:00
Eduardo Arias
a48856822c
Updated included headers to support compilation on Windows (using Visual C++)
...
- most of posix related functions and constants in unistd.h can be
found in io.h in Visual C++
- introduced src/compat/msvc.h to adjust for compiler differences (and
avoid updating code with #ifdef blocks for Windows support)
- removed some included headers that are not needed (both on Unix and
Windows builds)
2024-05-03 23:05:34 -03:00
Eduardo Arias
1f419bba8f
Implement sonarcloud suggestions
2024-05-02 17:18:31 -03:00
Eduardo Arias
9f5dc200ba
Replace final three suppressions entries with line numbers
...
- These were initially not included in these changes, as they were
other PRs (#3104 & #3132 ) that address them.
2024-04-29 22:28:42 -03:00
Eduardo Arias
7a9c0ab15f
Removed unused suppresion and avoid copy of logPath
2024-04-28 14:56:37 -03:00
Eduardo Arias
4aad8e0d06
Inline cppcheck suppressions
2024-04-28 14:56:23 -03:00
Eduardo Arias
cd2dded659
Removed unnecessary break after return
2024-04-28 14:56:00 -03:00
Eduardo Arias
0cd2f459f3
Address cppcheck suppressions in lmdb
2024-04-28 14:55:49 -03:00
Eduardo Arias
fde9d279b0
Removed unnecessary cppcheck suppression and r-value reference as copy should be avoidded by RVO
2024-04-28 14:55:18 -03:00
Felipe Zipitria
30fe6f935b
fix(rbl): typo in rbl check selector
...
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
2024-04-22 10:23:28 -03:00
Ervin Hegedus
16d0df0ff9
Optimized variable handling
2024-03-31 14:14:45 +02:00
Ervin Hegedus
7c4dcdfa4b
Changed 'euqal_range()' + loop by 'find()' in resolveFirst() methods
2024-03-29 16:32:34 +01:00
gberkes
5802626437
Deleted redundant code in 'ModSecurity::serverLog(...)'.
2024-03-28 20:12:30 +01:00
Ervin Hegedus
6d719bee5b
Merge pull request #3016 from M4tteoP/uri_decode_invalid
...
fix: makes uri decode platform independent
2024-03-05 16:11:01 +01:00
Elia Pinto
2daebc090f
src/utils/acmp.cc: reduce the scope of variable in a for () loop
...
In general, it is always preferable to reduce
the scope of a variable in a for loop
2024-02-29 20:20:41 +01:00
Elia Pinto
7fed599fdb
src/request_body_processor/multipart.cc: reduce the scope of variable in a for () loop
...
In general, it is always preferable to reduce
the scope of a variable in a for loop
2024-02-29 20:20:41 +01:00
Elia Pinto
b23abf440a
src/operators/verify_cc.cc: reduce the scope of variable in a for () loop
...
In general, it is always preferable to reduce
the scope of a variable in a for loop
2024-02-29 20:20:41 +01:00
Elia Pinto
9842b92bd1
src/actions/transformations/hex_decode.cc: reduce the scope of variable in a for () loop
...
In general, it is always preferable to reduce
the scope of a variable in a for loop
2024-02-29 20:20:41 +01:00
Mirko Dziadzka
367a871f30
Bump the C++ version from C++11 to C++17
...
This will allow the usage of more modern features in the future.
2024-02-09 21:57:31 +01:00
Ervin Hegedus
5f28c2bb21
Change REQUEST_FILENAME behavior
2024-01-30 12:21:45 +01:00
Ervin Hegedus
ec8e800a6a
Set the minimum security protocol version for SecRemoteRules
2024-01-27 17:27:00 +01:00
Martin Vierula
4c7a9bd312
Add WRDE_NOCMD to wordexp call
2023-12-06 08:16:39 -08:00
Matteo Pace
fcf205d599
fix: makes uri decode platform independent
2023-11-08 17:32:41 +01:00
Martin Vierula
c11b28292d
Fix: validateDTD compile fails if when libxml2 not installed
2023-11-06 20:35:05 -08:00
Martin Vierula
cb4d7ae371
Adjust some copyright dates
2023-10-31 06:23:19 -07:00
Martin Vierula
beaa452302
Fix memory leak of validateDTD's dtd object
2023-10-30 15:40:36 -07:00
Martin Vierula
36adc58ea3
const-ify some references (satisfy cppcheck)
2023-10-27 06:20:01 -07:00
Martin Vierula
b180de53bf
Fix memory leaks in ValidateSchema
2023-10-26 16:58:52 -07:00
Martin Vierula
fd67c6eb1d
Remove unneeded heap allocation in AnchoredSetVariable::set
2023-10-25 06:07:26 -07:00
Martin Vierula
dc6cce5f0c
refactoring and remove dead code in lmdb
2023-10-24 06:36:18 -07:00
Martin Vierula
34809d8064
Add expirevar support for lmdb
2023-10-10 10:31:52 -07:00
Martin Vierula
118e1b3a44
Support expirevar for in-memory collection
2023-09-29 11:40:03 -07:00
Martin Vierula
af45ccd53f
Fix: lmdb regex match on non-null-terminated string
2023-09-18 08:27:41 -07:00
Martin Vierula
dc2e38e242
Fix memory leaks in lmdb code (new'd strings)
2023-09-17 11:36:08 -07:00
Martin Vierula
ab5658f2d4
Fix: worst-case time in implementation of four transformations
2023-07-25 05:50:16 -07:00
martinhsv
fea6e6d60b
Merge pull request #2901 from airween/v3/pcrelimittx
...
Set TX:MSC_PCRE_LIMITS_EXCEEDED variable is limits exceeded
2023-07-07 17:31:20 -04:00
Martin Vierula
f812a3d725
Make MULTIPART_PART_HEADERS accessible to lua
2023-06-14 09:28:04 -07:00
Martin Vierula
b8e1aedef3
Fix: Lua scripts cannot read whole collection at once
2023-06-13 06:41:40 -07:00
Martin Vierula
938707d117
Fix: quoted Include config with wildcard
2023-05-30 09:32:07 -07:00
Ervin Hegedüs
4403a163c4
Set TX:MSC_PCRE_LIMITS_EXCEEDED variable is limits exceeded
2023-05-14 17:26:08 +02:00
Martin Vierula
2121938c51
Change some parms to reference-to-const to satisfy cppcheck
2023-05-11 15:06:25 -07:00
Martin Vierula
da8782ce72
Minor whitespace adjustment
2023-05-11 07:37:43 -07:00
martinhsv
09a135baab
Merge pull request #2736 from brandonpayton/add-regex-match-limits-and-error-reporting
...
Add isolated PCRE match limits as a layer of ReDoS defense
2023-05-09 06:09:28 -07:00
Martin Vierula
1078a7cfab
Change some parms from pass-by-value to reference-to-const
2023-04-29 13:21:00 -07:00
Martin Vierula
4fac8d72f4
Address some constParameter complaints from cppcheck
2023-04-28 08:20:37 -07:00
