github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2026-01-13 15:07:10 +03:00
Code Issues Packages Projects Releases Wiki Activity
560 Commits 55 Branches 109 Tags
7939ef559ca1af3c03812287ee200b1ff2067f2d
Commit Graph

560 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
b1v1r
7939ef559c Merged in CHANGES updates from r1238 for MODSEC-29. 2009-03-03 21:08:17 +00:00
b1v1r
168ffa543a Fix a typo in the SecRuleInheritance example. 2008-11-13 00:23:18 +00:00
(no author)
57fb69f83a Make a note of configure options that can affect performance (MODSEC-28). 2008-10-21 17:46:20 +00:00
(no author)
160294192c Removed an invalid "Internal error" message forcing auditing of a request (MODSEC-29). 
Cleaned up error messages prior to using send_error_bucket().
 2008-10-21 17:45:18 +00:00
brectanus
c10359a3d9 Update version for pending 2.5.8 release. 2008-10-06 21:12:26 +00:00
brectanus
4be57ffad5 Change version to 2.5.7 for release. 2008-09-24 18:51:06 +00:00
brectanus
be4e8438dd Update versions for tagging 2.5.7-rc1. 2008-09-17 17:00:00 +00:00
brectanus
d8be195989 Revert r1205 as it was fixed in mod_jk upstream. 2008-09-17 16:54:31 +00:00
ivanr
6af5fb3379 Update documentation related to REQUEST_BODY. 2008-09-17 11:00:11 +00:00
ivanr
c1d3333ff8 CHANGES text describing when REQUEST_BODY is populated was not accurate. 2008-09-17 10:59:11 +00:00
brectanus
f173301b39 Worked around mod_jk issue where a 401 response was not including the WWW-Authentication header (MODSEC-16). 2008-09-15 19:51:06 +00:00
brectanus
7b5d35c462 Added ability to use ctl:requestBodyAccess=off in phase:1 to avoid limit check. 
Added regression tests for this as well.
 2008-09-10 19:45:13 +00:00
brectanus
a8933475b7 Added additional check for XML well formed. 2008-09-10 18:32:24 +00:00
brectanus
a920630d1c Added a comment. 2008-09-10 17:39:18 +00:00
brectanus
d257fd7910 Change from ctl:requestBodyBuffering to ctl:forceRequestBodyVariable. 2008-09-10 17:11:20 +00:00
ivanr
d6cbd4d973 Tidy up. 2008-09-10 14:15:37 +00:00
ivanr
29948745e9 Document css_inplace_decode(). 2008-09-10 12:44:41 +00:00
ivanr
c469947b43 Tidy up. 2008-09-10 11:34:16 +00:00
brectanus
335f2cfb0b Updated docs to point out some features are not available on all OSes. MODSEC-9 2008-09-05 16:18:00 +00:00
brectanus
2c07abaf7f Typo in SecRuleUpdateActionById example. 2008-09-05 15:29:25 +00:00
brectanus
28bda503a3 Make sure we fail to validate DTD/schema after a parsing error. Fixes MODSEC-5. 2008-09-03 22:16:42 +00:00
brectanus
d33d6132c3 Remove declaration of an unused variable. 2008-09-03 21:20:06 +00:00
brectanus
f2f160e10c Allow ability to force request body buffering to memory. Fixes MODSEC-2. 2008-09-03 20:42:28 +00:00
brectanus
a25269a5e5 Updated the CHANGES. 2008-09-03 18:06:14 +00:00
brectanus
866a809129 Fixed MODSEC-2 by using the msr->hostname (ap_get_server_name(r)) vs r->hostname in the log. 2008-09-02 23:43:15 +00:00
brectanus
c47c3583e0 Added mlogc source. 2008-09-02 23:10:36 +00:00
ivanr
ecd1750cce Tidy up the code for the performance-measurement mode. Remove the per-phase measurements, which don't seem to work (at least not in my case). 2008-09-01 09:36:31 +00:00
ivanr
3dd0185d3c From trunk: make PERFORMANCE_MEASUREMENT more accurate. 2008-08-29 16:14:17 +00:00
ivanr
795f47d56f Carried over the documentation changes from the trunk. 2008-08-27 17:14:28 +00:00
brectanus
ca0d625bef Update configure to better find lua libs. 2008-08-18 16:00:29 +00:00
brectanus
15b043e1c2 Update a regression test due to changed error message. 2008-08-15 21:04:12 +00:00
brectanus
383f4aa2f8 Update test stup with new msr_log_* wrappers. 2008-08-15 20:45:28 +00:00
brectanus
efba0e87a4 Backport cssDecode part 2. See #512. 2008-08-15 20:44:36 +00:00
brectanus
b6657a4b93 Update CHANGES. 
Sync up docs.
 2008-08-15 20:25:27 +00:00
brectanus
e26d44a6bd Allow disabling processing of request body size limit in phase 1. See #518. 2008-08-15 20:21:25 +00:00
brectanus
aa948b6639 Backport t:cssDecode to 2.5. 2008-08-15 20:14:16 +00:00
brectanus
abbde8f1e7 Added XML warn/error output to debug log. See #519. 2008-08-15 19:58:02 +00:00
brectanus
77aa445d27 Add parity transformations. See #516. 2008-08-14 23:49:39 +00:00
brectanus
e3ddb2403b Updated regression suite to use full path to LoadModule. 2008-08-08 22:50:47 +00:00
brectanus
492ffd9897 Sync up branches/2.5.x and trunk. 2008-07-31 22:36:24 +00:00
brectanus
0616064a29 Update doc fixes from trunk. 2008-07-31 20:32:33 +00:00
brectanus
bab6fdba35 Prepare 2.5.x branch for next release. 2008-07-31 20:30:03 +00:00
brectanus
5c06f31001 Added mlogc to CHANGES. 2008-07-31 17:05:31 +00:00
brectanus
eadc2832fe Cleanup regression suite to make it a bit more user-friendly. 2008-07-31 16:59:37 +00:00
brectanus
bc40fdb054 Fix a typo. 2008-07-31 16:57:44 +00:00
brectanus
4e6aaeb864 Added configure for convieniance of those w/o auto tools. 2008-07-31 15:07:36 +00:00
ivanr
90444d4513 Update documentation to use correct tfn function in examples. Warn users that REQUEST_BASENAME, _FILENAME, _URI and _URI_RAW variables are not transformed by default. 2008-07-31 11:00:11 +00:00
ivanr
3f26e3d384 Tidy up. 2008-07-31 10:09:35 +00:00
ivanr
7edd9cc7f7 Update licensing headers in all source code files. 2008-07-31 09:30:59 +00:00
ivanr
b9ed23da21 Updated trademarks. 2008-07-31 09:12:00 +00:00