github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2026-01-13 23:17:10 +03:00
Code Issues Packages Projects Releases Wiki Activity
707 Commits 55 Branches 109 Tags
87da300b1d47a3c710bbbf753d7617ed45060abc
Commit Graph

707 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
brectanus
c10359a3d9 Update version for pending 2.5.8 release. 2008-10-06 21:12:26 +00:00
brectanus
4be57ffad5 Change version to 2.5.7 for release. 2008-09-24 18:51:06 +00:00
brectanus
be4e8438dd Update versions for tagging 2.5.7-rc1. 2008-09-17 17:00:00 +00:00
brectanus
c3c822ea01 Revert r1205 as it was fixed in mod_jk upstream. 2008-09-17 16:54:31 +00:00
brectanus
d8be195989 Revert r1205 as it was fixed in mod_jk upstream. 2008-09-17 16:54:31 +00:00
ivanr
becf694033 Updated REQUEST_BODY documentation. 2008-09-17 11:04:12 +00:00
ivanr
6af5fb3379 Update documentation related to REQUEST_BODY. 2008-09-17 11:00:11 +00:00
ivanr
7b0e71f929 CHANGES text describing when REQUEST_BODY is populated was not accurate. 2008-09-17 10:59:11 +00:00
ivanr
c1d3333ff8 CHANGES text describing when REQUEST_BODY is populated was not accurate. 2008-09-17 10:59:11 +00:00
brectanus
3848ff5b36 Worked around mod_jk issue where a 401 response was not including the WWW-Authentication header (MODSEC-16). 2008-09-15 19:51:06 +00:00
brectanus
f173301b39 Worked around mod_jk issue where a 401 response was not including the WWW-Authentication header (MODSEC-16). 2008-09-15 19:51:06 +00:00
brectanus
67c48bfdfb Added ability to use ctl:requestBodyAccess=off in phase:1 to avoid limit check. 
Added regression tests for this as well.
 2008-09-10 19:45:13 +00:00
brectanus
7b5d35c462 Added ability to use ctl:requestBodyAccess=off in phase:1 to avoid limit check. 
Added regression tests for this as well.
 2008-09-10 19:45:13 +00:00
brectanus
c5e258f0ba Added additional check for XML well formed. 2008-09-10 18:32:24 +00:00
brectanus
a8933475b7 Added additional check for XML well formed. 2008-09-10 18:32:24 +00:00
brectanus
b2c7424a96 Added a comment. 2008-09-10 17:39:18 +00:00
brectanus
a920630d1c Added a comment. 2008-09-10 17:39:18 +00:00
brectanus
309510d70b Change from ctl:requestBodyBuffering to ctl:forceRequestBodyVariable. 2008-09-10 17:11:20 +00:00
brectanus
d257fd7910 Change from ctl:requestBodyBuffering to ctl:forceRequestBodyVariable. 2008-09-10 17:11:20 +00:00
ivanr
5740f7a3eb Tidy up. 2008-09-10 14:15:37 +00:00
ivanr
d6cbd4d973 Tidy up. 2008-09-10 14:15:37 +00:00
ivanr
2ee69ce468 Document css_inplace_decode(). 2008-09-10 12:44:41 +00:00
ivanr
29948745e9 Document css_inplace_decode(). 2008-09-10 12:44:41 +00:00
ivanr
2f7ff8f7ab Tidy up. 2008-09-10 11:34:16 +00:00
ivanr
c469947b43 Tidy up. 2008-09-10 11:34:16 +00:00
brectanus
ec49ce05c7 Updated docs to point out some features are not available on all OSes. MODSEC-9 2008-09-05 16:18:00 +00:00
brectanus
335f2cfb0b Updated docs to point out some features are not available on all OSes. MODSEC-9 2008-09-05 16:18:00 +00:00
brectanus
ac767de86e Typo in SecRuleUpdateActionById example. 2008-09-05 15:29:25 +00:00
brectanus
2c07abaf7f Typo in SecRuleUpdateActionById example. 2008-09-05 15:29:25 +00:00
brectanus
f20059b009 Make sure we fail to validate DTD/schema after a parsing error. Fixes MODSEC-5. 2008-09-03 22:16:42 +00:00
brectanus
28bda503a3 Make sure we fail to validate DTD/schema after a parsing error. Fixes MODSEC-5. 2008-09-03 22:16:42 +00:00
brectanus
f5af5ef429 Remove declaration of an unused variable. 2008-09-03 21:20:06 +00:00
brectanus
d33d6132c3 Remove declaration of an unused variable. 2008-09-03 21:20:06 +00:00
brectanus
34798e9abe Allow ability to force request body buffering to memory. Fixes MODSEC-2. 2008-09-03 20:42:28 +00:00
brectanus
f2f160e10c Allow ability to force request body buffering to memory. Fixes MODSEC-2. 2008-09-03 20:42:28 +00:00
brectanus
139d651bbf Updated the CHANGES. 2008-09-03 18:06:14 +00:00
brectanus
a25269a5e5 Updated the CHANGES. 2008-09-03 18:06:14 +00:00
brectanus
deb6a816b4 Fixed MODSEC-2 by using the msr->hostname (ap_get_server_name(r)) vs r->hostname in the log. 2008-09-02 23:43:15 +00:00
brectanus
866a809129 Fixed MODSEC-2 by using the msr->hostname (ap_get_server_name(r)) vs r->hostname in the log. 2008-09-02 23:43:15 +00:00
brectanus
20cc395510 Added mlogc source. 2008-09-02 23:10:36 +00:00
brectanus
c47c3583e0 Added mlogc source. 2008-09-02 23:10:36 +00:00
ivanr
2818e66a95 Tidy up the code for the performance-measurement mode. Remove the per-phase measurements, which don't seem to work (at least not in my case). 2008-09-01 09:38:30 +00:00
ivanr
ecd1750cce Tidy up the code for the performance-measurement mode. Remove the per-phase measurements, which don't seem to work (at least not in my case). 2008-09-01 09:36:31 +00:00
ivanr
3dd0185d3c From trunk: make PERFORMANCE_MEASUREMENT more accurate. 2008-08-29 16:14:17 +00:00
ivanr
acec75be45 Make PERFORMANCE_MEASUREMENT more accurate by removing stray msr_log() invocation. Clean the code a bit. 2008-08-29 16:09:59 +00:00
ivanr
795f47d56f Carried over the documentation changes from the trunk. 2008-08-27 17:14:28 +00:00
ivanr
9997cee04a Clarified that SecMarker IDs are the same thing as rule IDs. 2008-08-27 14:46:31 +00:00
ivanr
1b977e6106 Clarifications in response to comments from Kiyohiko Kajihara. 2008-08-27 12:22:56 +00:00
brectanus
ca0d625bef Update configure to better find lua libs. 2008-08-18 16:00:29 +00:00
brectanus
a686b0633a Update configure to better find lua libs. 2008-08-18 16:00:29 +00:00