brectanus
94f617ae1c
Update CHANGES and release dates.
2008-02-09 01:22:01 +00:00
brectanus
45e85e4c89
Update CHANGES and version dates.
2008-02-08 01:24:46 +00:00
brectanus
fd8f4e319f
Update CHANGES and versions for 2.5.0-rc3.
2008-02-05 00:55:16 +00:00
brectanus
4535b2e67b
Cleanup CHANGES and set release dates for 2.5.0-rc2.
2008-01-29 16:36:36 +00:00
brectanus
52ccced72b
Cleanup building actionsets and use minimal default. See #445 .
...
Fully resolve all rules before logging.
2008-01-25 04:52:49 +00:00
brectanus
946a350043
Fixed removing cained rules with ctl action.
2008-01-24 22:39:13 +00:00
brectanus
f8adea949c
Implemented SecUploadFileMode. See #448 .
2008-01-24 22:10:37 +00:00
brectanus
a3584993f5
Implement "block" pseudo-action. See #441 .
2008-01-24 05:16:35 +00:00
brectanus
9dbc7807d9
Remove query string from error log. See #447 .
2008-01-23 18:12:59 +00:00
brectanus
c72057bc57
Cleanup CHANGES.
2008-01-22 06:59:06 +00:00
brectanus
18e9ef0808
Remove default transformations. See #445 .
2008-01-22 05:50:42 +00:00
brectanus
0d24a08f33
Implemented SecRuleUpdateActionById. See #442 .
2008-01-19 02:23:41 +00:00
brectanus
9fb03d277d
Fixing code based on review comments...
...
Cleaned up what vars are cacheable.
Added parens around "*foo++" where it clarified the operation to be "*(foo++)".
Added " at VARNAME" to operator matches where needed.
Escaped var->name in the var generation (user-supplied data).
Marked a bunch of TODOs as ENHs instead.
Transformed some C++ style comments to C style.
Removed the %0-9 macros code which was commented out.
Optimized some ctl action code so that multiple ifs are else ifs.
Implemented some error messages marked as ENH.
Make commented out acmp debugging a configure-time option.
Cleanup GEO debug log messages.
Added relative filename support for geo dbs.
Added help text to Sec* directives.
2008-01-18 00:47:30 +00:00
brectanus
31e3ada844
Fixed phase 5 rules not being excludable.
2008-01-08 20:45:54 +00:00
brectanus
badb2791f1
Initial 'configure' based compilation (buildconf generates configure script).
2008-01-02 21:32:10 +00:00
ivanr
2068357af8
Added m.getvars() and finalised Lua support.
2007-12-21 12:50:03 +00:00
brectanus
59685455d9
Update core rules to 1.5.1.
2007-12-20 17:01:12 +00:00
ivanr
b9a28882b2
Enhanced allow.
2007-12-17 11:22:47 +00:00
brectanus
5bd9e0640f
Add CHANGES entry. See #425 .
2007-12-15 00:57:21 +00:00
brectanus
3c4eacf6f1
Update Core Rules to those in 2.1.4.
2007-12-14 23:23:46 +00:00
brectanus
4602f7d908
Remove tabs from CHANGES.
2007-12-14 22:52:29 +00:00
brectanus
9136d391d3
Forgoten CHANGES entry for last commit.
2007-12-14 22:50:01 +00:00
brectanus
515290434c
Add 2.1.4 changes to trunk CHANGES.
2007-12-14 20:22:54 +00:00
brectanus
f68f0156c3
Cleanup CHANGES.
2007-12-14 20:20:18 +00:00
brectanus
5065852dfe
More efficient collection persistance and deletion on retrieval. See #345 and #426 .
2007-12-14 19:53:23 +00:00
brectanus
aa68fff104
Fixed decoding \9 with t:escapeSeqDecode. See #423 .
2007-12-14 00:30:25 +00:00
brectanus
8aa31fd099
Change jsDecodeuni to jsDecode which also decodes all the other JS escapes. See #193 .
2007-12-14 00:19:46 +00:00
brectanus
b0de659133
Added t:jsDecodeUni handling unicode similar to t:urlDecodeUni. See #193 .
2007-12-13 00:58:02 +00:00
brectanus
cbf79d43ba
Update version to ready for 2.5.0-rc1.
2007-12-12 23:08:14 +00:00
brectanus
54cac6461b
Add IS_NEW and IS_EXPIRED collection variables. See #345 .
2007-12-12 22:52:08 +00:00
brectanus
715a8eae58
Implement SecMarker. See #416 .
2007-12-11 17:53:50 +00:00
brectanus
a6c2d867f4
Improvements to audit logging matching rules. See #93 .
2007-11-30 21:31:12 +00:00
brectanus
dcdce0cbc5
Added matching rules to audit log data. See #93 .
2007-11-30 00:52:21 +00:00
ivanr
ff12e6f1c0
Remove comment that is not needed.
2007-11-29 18:10:54 +00:00
ivanr
526bcc0b5a
More informative change log message for fixing utf-8 validation.
2007-11-29 14:50:54 +00:00
ivanr
c5c759d6f0
Forgot to update CHANGES.
2007-11-29 14:03:05 +00:00
ivanr
575e86388a
Implemented SecRequestBodyNoFilesLimit ( #103 ).
2007-11-29 11:41:48 +00:00
ivanr
4a08d7e6bf
Handle out-of-disk-space conditions gracefully when writing to audit log.
2007-11-27 10:52:14 +00:00
brectanus
1860e2a35e
Renamed SecGeoLookupsDb to SecGeoLookupDB.
2007-11-26 17:04:42 +00:00
ivanr
6ca5b831fb
Document SecComponentSignature. Update CHANGES.
2007-11-26 16:22:33 +00:00
brectanus
e45ea12fc8
Fix warnings on Solaris and/or 64bit builds.
2007-11-02 22:31:47 +00:00
brectanus
8e99090067
Add the input filter if we have read the body (even if a sub-request). See #335 .
2007-10-17 22:41:37 +00:00
brectanus
9d49adf028
Basic implementation of skipAfter (still need to implement placeholders so it works with removed rules). See #258 .
2007-10-17 19:59:28 +00:00
brectanus
974298a76c
Added ctl:ruleRemoveById action. See #259 .
2007-10-17 19:11:47 +00:00
brectanus
b784e6cb73
Change from TX:LAST_MATCHED_VAR_NAME to MATCHED_VAR. See #123 .
2007-10-03 00:23:46 +00:00
brectanus
83a7886071
Now use memcmp() vs strncmp() in string comparison operators since we already short-circuit when the match will not fit in the target.
...
Added @containsWord. See #182 .
2007-10-02 18:50:35 +00:00
brectanus
da1399f0b8
Added TX:LAST_MATCHED_VAR_NAME. See #123 .
2007-10-01 22:35:52 +00:00
brectanus
9d4965b29e
Fix macro expansion in setvar. See #126 .
2007-10-01 17:24:10 +00:00
brectanus
fe1021e369
More cleanup of error messages and marking as relevant. See #4 .
2007-09-28 20:02:02 +00:00
brectanus
f3a8854fe9
Mark any error conditions/alerts as 'relevant'.
...
Clean up/add error messages where this can happen.
2007-09-27 21:18:23 +00:00
