Felipe Zimmerle
6a742cdf76
Refactoring: Renames RulesProperties to RulesSetProperties
2020-02-17 13:17:03 -03:00
Felipe Zimmerle
7495675d54
Refactoring: Renames Rules to RulesSet
...
RulesSet does not only contain rules but alse properties
2020-02-11 14:26:47 -03:00
Felipe Zimmerle
357c140003
Changens copyright year
2020-01-31 10:32:37 -03:00
Felipe Zimmerle
df169ea108
Adds support for libMaxMind
2018-03-22 19:11:42 -03:00
Felipe Zimmerle
ff782ddfa4
Having LDADD and LDFLAGS organized on Makefile.am
2018-02-21 14:26:47 -03:00
Felipe Zimmerle
768a76a61e
perf. improvement/rx: Only compute dynamic regex in case of macro
...
On #1528 was added the support for macro expansion on @rx operator.
The performance improvement suggested on the pull request was not
thread safe, therefore removed. This patch adds a performance
improvement on top of #1528 . The benchmarks points to 10x faster
results on OWASP CRS.
2018-02-20 13:39:59 -03:00
Felipe Zimmerle
d162d4e20b
Fix uri on the benchmark utility
2018-02-20 13:39:59 -03:00
michaelgranzow-avi
8bcef41878
Improve benchmark tool
...
Benchmark tool: proper initialization of intervention,
get number of iterations from cmd-line, add help message.
2017-11-17 09:57:31 -03:00
Felipe Zimmerle
1189e9b0ef
Adds support to LUA in configure scripts
2017-10-31 09:59:12 -03:00
Felipe Zimmerle
7622866f97
Adds support for @fuzzyHash
...
Issue #997
2017-10-26 17:44:17 -03:00
Victor Hora
63bef3d142
Support to JSON stuff on serial logging
2017-10-09 09:02:31 -03:00
Felipe Zimmerle
e2af60e765
Expands log_cb to share ruleMessage structure instead text
...
Text version still available and it is the default options
2017-03-06 15:02:04 -03:00
Felipe Zimmerle
7834cf857b
Fix memory leak on the benchmark utility
2016-12-28 19:57:32 -03:00
Andrei Belov
a3787fedb8
Fix building with -Wl,--as-needed linker option with older ld versions
2016-12-09 09:20:56 -03:00
Felipe Zimmerle
361ec8340f
benchmark: Removes the \n\r on the user agent
2016-11-11 13:53:56 -03:00
Felipe Zimmerle
8ceaf99d5d
Updates the CRS script to target the recent v3.0.0 release
2016-11-11 13:53:24 -03:00
Felipe Zimmerle
3ee7b24928
Adds refCounter to actions
2016-11-08 18:14:34 -03:00
Felipe Zimmerle
c680ddf2cd
Refactoring on rulesProperties class
...
Among of other things the merge process was improved to detect if
certain properties were set on the origin rule set.
2016-10-05 12:01:15 -03:00
Felipe Zimmerle
5daf4873b5
build: Searching for LMDB during the configuration phase
2016-07-05 11:56:19 -03:00
Felipe Zimmerle
b8bd0c5960
API CHANGE: response status is now set on processResponseHeaders
...
That change was needed to move the variable attribution to earliest
as possible. We also have a new field for HTTP_PROTOCOL version used
on the response.
2016-06-21 09:24:46 -03:00
Felipe Zimmerle
6a40752500
Adds XML variable, xml body request processor and @validateSchema
2016-05-12 11:11:40 -03:00
Felipe Zimmerle
88ca736543
Avoids the installation of test utilities during `make install'
...
Those utilities are not interesting for the general usage, most
likekly it will be used by very retrict number of people whom are
likely to compile ModSecurity by their selfs.
This issue was reported on #1083
2016-03-18 14:26:41 -03:00
Felipe Zimmerle
1f68075a28
Process the logging phase on the benchmark utility
2016-02-17 14:39:10 -03:00
Felipe Zimmerle
49fc1f8b79
Fix memory leak on the benchmark utility
...
Now deleting the transaction object even if there is an intervention
2016-02-16 23:04:07 -03:00
Felipe Zimmerle
a51e707517
Renames class Assay to Transaction
2016-01-13 15:57:00 -03:00
Felipe Zimmerle
f3fd5d6621
Adds owasp/2 experiemntal rules on the test set for benchmark
2016-01-12 14:24:59 -03:00
Felipe Zimmerle
331df90bab
Enables OWASP CRS optional_rules on becnhmark test case
2016-01-12 10:50:38 -03:00
Felipe Zimmerle
ab92bed6fa
Parser improvement: Supporting variables selection with regex
2016-01-12 09:59:33 -03:00
Felipe Zimmerle
ed13cab9f4
Adds script to download and configure benchmark script to use owasp v[3,2]
2016-01-11 17:50:15 -03:00
Felipe Zimmerle
a4d8dfd5ee
Adds ModSecurity recommended configuration file
2016-01-11 13:56:14 -03:00
Felipe Zimmerle
c2d9a153cb
Adds support to afl fuzzer in the build system
2015-12-23 00:27:30 -03:00
Felipe Zimmerle
80b82d3707
Adds the Global LDADD option and fed according to the platform
2015-12-01 17:34:18 -03:00
Felipe Zimmerle
b5a43871e6
Changes library namespace from ModSecurity to modsecurity
2015-12-01 10:55:59 -03:00
Ivan Prokhorov
7a300eb945
Fix pcre cflags variable and adds LDFLAGS for dependencies
2015-11-16 09:15:38 -08:00
Felipe Zimmerle
e54ef72051
Looks for external resources in the same path of the rule
2015-10-06 09:21:30 -03:00
Felipe Zimmerle
5cc9e94505
Splits operator into OPERATOR and FREE_TEXT on sec lang grammar
2015-10-02 12:07:18 -03:00
Felipe Zimmerle
8255ce86ca
Adds reference to filename and line number to lexer errors
2015-09-30 14:36:33 -03:00
Felipe Zimmerle
d084ab5f2d
Fix the "line counting" on parser errors
2015-09-29 12:22:23 -03:00
Felipe Zimmerle
70e2a4b379
Adds support to include path between quotes
2015-09-29 10:43:28 -03:00
Felipe Zimmerle
ed86c24df6
Adds checks for the NO_LOGS definition and improved the vars resolution time
2015-09-17 17:41:38 -03:00
Felipe Zimmerle
d0c215d78b
Adds support for the server log integration
2015-09-17 09:01:52 -03:00
Felipe Zimmerle
e94226f1d8
Fix some build issues
...
Optional dependencies were temporarily marked as mandatory, in order
to sort any build problem, later it will be marked as optional again.
2015-08-25 00:25:33 -03:00
Felipe Zimmerle
17f88f5821
Using libpcre instead of c++11 regex
2015-08-03 13:45:09 -03:00
Felipe Zimmerle
e016b72a8e
Handles better the memory utilization
...
- Added reference counts to Rule and AuditLog;
- Some memory leaks were removed, including GeoLookup;
- Deal better with parser errors;
- Overriding the AutlogLogWritter destructor.
2015-07-26 22:51:57 -03:00
Felipe Zimmerle
76b34af357
Adds support to load remote rules
2015-07-23 14:40:56 -03:00
Felipe Zimmerle
dc0b13ad74
Cosmetic: fix copyright header
2015-07-22 23:03:09 -03:00
Felipe Zimmerle
e189055ec3
Adds support to GeoIP operator and variables.
2015-07-20 21:05:14 -03:00
Felipe Zimmerle
2138dd1369
Adds method setConnectorInformation to ModSecurity class
...
For the purpose of log it is necessary for modsecurity to understand which
'connector' is consuming the API.
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
aa8dc9115b
Adds first version of Assay's materialization in a JSON format
...
That format will be used by the audit logs.
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
278b513933
Adds protocol and http version to processUri method's signature
...
Protocol and http version will be further used to fill some variables
and the audit log.
2015-07-10 18:37:48 -03:00
