3402 Commits

Author SHA1 Message Date
Martin Vierula
34809d8064
Add expirevar support for lmdb 2023-10-10 10:31:52 -07:00
Martin Vierula
118e1b3a44 Support expirevar for in-memory collection 2023-09-29 11:40:03 -07:00
martinhsv
135d1fa42b
Merge pull request #2985 from martinhsv/v3/master
Fix: lmdb regex match on non-null-terminated string
2023-09-18 12:02:54 -04:00
Martin Vierula
af45ccd53f
Fix: lmdb regex match on non-null-terminated string 2023-09-18 08:27:41 -07:00
martinhsv
375519d5f2
Merge pull request #2983 from martinhsv/v3/master
Fix memory leaks in lmdb code (new'd strings)
2023-09-17 15:03:51 -04:00
Martin Vierula
dc2e38e242
Fix memory leaks in lmdb code (new'd strings) 2023-09-17 11:36:08 -07:00
Martin Vierula
8594cb8a7d
Correct json for one regression test file 2023-09-13 06:59:15 -07:00
martinhsv
60f802e480
Merge pull request #2939 from martinhsv/v3/master
Configure: add additional name to pcre2 pkg-config list
2023-08-02 09:25:38 -04:00
Martin Vierula
31cbd7309a
Configure: add additional name to pcre2 pkg-config list 2023-08-02 05:45:58 -07:00
Martin Vierula
cbe2d61174
CHANGES: Preparing for next version 2023-08-01 17:01:45 -07:00
Martin Vierula
ccc2d9b536
Change release version to v3.0.10 v3.0.10 2023-07-25 07:23:07 -07:00
martinhsv
092921d87e
Merge pull request #2934 from martinhsv/v3/master
Fix: worst-case time in implementation of four transformations
2023-07-25 09:24:15 -04:00
Martin Vierula
ab5658f2d4
Fix: worst-case time in implementation of four transformations 2023-07-25 05:50:16 -07:00
Martin Vierula
3f0971666f
CHANGES entry for previous PR 2023-07-10 07:30:14 -07:00
martinhsv
fea6e6d60b
Merge pull request #2901 from airween/v3/pcrelimittx
Set TX:MSC_PCRE_LIMITS_EXCEEDED variable is limits exceeded
2023-07-07 17:31:20 -04:00
martinhsv
2cb6344bf8
Merge pull request #2916 from martinhsv/v3/master
Make MULTIPART_PART_HEADERS accessible to lua
2023-06-14 14:52:31 -04:00
Martin Vierula
f812a3d725
Make MULTIPART_PART_HEADERS accessible to lua 2023-06-14 09:28:04 -07:00
martinhsv
85c8760774
Merge pull request #2915 from martinhsv/v3/master
Fix: Lua scripts cannot read whole collection at once
2023-06-13 17:27:23 -04:00
Martin Vierula
63bbf624dc
Remove check-static from macos builds 2023-06-13 13:51:54 -07:00
Martin Vierula
b8e1aedef3
Fix: Lua scripts cannot read whole collection at once 2023-06-13 06:41:40 -07:00
martinhsv
b84f32d6f2
Merge pull request #2909 from martinhsv/v3/master
Fix: quoted Include config with wildcard
2023-05-31 08:47:31 -04:00
Martin Vierula
938707d117
Fix: quoted Include config with wildcard 2023-05-30 09:32:07 -07:00
Ervin Hegedüs
4403a163c4 Set TX:MSC_PCRE_LIMITS_EXCEEDED variable is limits exceeded 2023-05-14 17:26:08 +02:00
Martin Vierula
2121938c51
Change some parms to reference-to-const to satisfy cppcheck 2023-05-11 15:06:25 -07:00
Martin Vierula
da8782ce72
Minor whitespace adjustment 2023-05-11 07:37:43 -07:00
Martin Vierula
fdeaf17c67
CHANGES entry for previous PR 2023-05-10 06:08:59 -07:00
Martin Vierula
1ca282a5e6
Add exclusions due to newer cppcheck version 2023-05-09 12:42:30 -07:00
Martin Vierula
f8ec873376
github workflow: update macos version to macos-11 2023-05-09 07:14:09 -07:00
martinhsv
09a135baab
Merge pull request #2736 from brandonpayton/add-regex-match-limits-and-error-reporting
Add isolated PCRE match limits as a layer of ReDoS defense
2023-05-09 06:09:28 -07:00
Martin Vierula
62bbd7b078
Correction to previous cppcheck suppression adjustment 2023-05-08 09:44:44 -07:00
Martin Vierula
95c7009b88
Add cppcheck suppressions 2023-05-05 13:29:41 -07:00
Brandon Payton
6ad665f6bb Add editorconfig to help OSS contributors
When switching between many different open source code bases, it can be
cumbersome to constantly change editor settings in order to respect a
given project's basic style preferences. EditorConfig is a popular
format for representing those preferences so editors can automatically
respect them.

Many editors support EditorConfig out of the box, and many others have
EditorConfig plugins:
https://editorconfig.org/#pre-installed

This commit adds an EditorConfig to the ModSecurity project. It is most
likely not perfect because the chosen indentation varies a bit
throughout the project, but hopefully it provides a good basis for most
ModSecurity editing.
2023-05-05 09:18:03 -04:00
Martin Vierula
1078a7cfab
Change some parms from pass-by-value to reference-to-const 2023-04-29 13:21:00 -07:00
Martin Vierula
8d91a5084f
github workflow: toggle pcre2 instead of ssdeep in Ubuntu tests 2023-04-29 09:26:09 -07:00
Martin Vierula
4fac8d72f4
Address some constParameter complaints from cppcheck 2023-04-28 08:20:37 -07:00
Martin Vierula
e9277e199a
CHANGES entry for previous PR 2023-04-28 06:18:05 -07:00
martinhsv
4050c840f5
Merge pull request #2868 from grnet/v3/fix-multimatch-chain
Fix meta-actions not being applied if multiMatch is enabled in the chain starter rule
2023-04-27 14:13:28 -07:00
Marios Levogiannis
12add9aef0
Fix meta-actions not being applied if multiMatch is enabled in the chain starter rule
Meta-actions can only be used in non-chained rules or in the chain starter
rule of a rule chain. The m_chainedRuleParent member of the RuleWithActions
class is NULL only if the rule is not chained or if it is the chain starter
rule of a rule chain.

Fixes #2867.
2023-04-27 19:43:01 +03:00
Martin Vierula
808148ce02
CHANGES entry and cppcheck suppression adjustment for prev PR 2023-04-25 15:17:13 -07:00
martinhsv
5b709d9da7
Merge pull request #2866 from grnet/v3/fix-multimatch-tags
Fix tags not being populated in audit log when multiMatch is enabled
2023-04-25 07:45:41 -07:00
Martin Vierula
7ca5719526
CHANGES entry for previous PR 2023-04-24 11:33:37 -07:00
martinhsv
7cf0445ad4
Merge pull request #2870 from airween/v3/multipartpartheaderfix
Set correct line end in case of `MULTIPART_PART_HEADER` variable
2023-04-24 06:59:16 -07:00
Ervin Hegedüs
6623c0ae29 Changed strip methodology to MULTIPART_PART_HEADERS 2023-04-23 17:32:26 +02:00
Ervin Hegedüs
6fbdee9ff0 Merge branch 'v3/master' of https://github.com/SpiderLabs/ModSecurity into v3/multipartpartheaderfix 2023-04-23 17:17:29 +02:00
martinhsv
a830ef634f
Merge pull request #2894 from martinhsv/v3/master
Configure: use AS_ECHO_N instead echo -n
2023-04-20 11:55:46 -07:00
Martin Vierula
8d62ac4b04
Configure: use AS_ECHO_N instead echo -n 2023-04-20 07:28:21 -07:00
martinhsv
6fc270e225
Merge pull request #2891 from martinhsv/v3/master
Adjust position of memset from 2890
2023-04-19 14:20:32 -07:00
Martin Vierula
b9eb39af83
Adjust position of memset from 2890 2023-04-19 08:13:48 -07:00
Martin Vierula
09568351d9
CHANGES entry for previous PR 2023-04-18 10:59:57 -07:00
martinhsv
5365a17c5e
Merge pull request #2846 from tomsommer/patch-1
Also test empty lines
2023-04-18 06:14:10 -07:00