Felipe Zimmerle
6af9e8e42a
Fix QUERY_STRING variable
...
QUERY_STRING should be populated using the raw string.
2015-07-21 23:02:55 -03:00
Felipe Zimmerle
7f76bb6df1
Adds PATH_INFO variable
2015-07-21 22:29:52 -03:00
Felipe Zimmerle
62fece7823
Adds support to SecResponseBodyLimit directive and OUTBOUND_DATA_ERROR var
2015-07-21 19:46:15 -03:00
Felipe Zimmerle
8e59b1822c
Adds support to variable MULTIPART_UNMATCHED_BOUNDARY
2015-07-21 19:33:58 -03:00
Felipe Zimmerle
a9147b76ad
Adds support to the MULTIPART_STRICT_ERROR variable
...
Still missing to check:
- MULTIPART_FILE_LIMIT_EXCEEDED
- REQBODY_PROCESSOR_ERROR
- MULTIPART_HEADER_FOLDING
- MULTIPART_INVALID_HEADER_FOLDING
2015-07-21 17:47:00 -03:00
Felipe Zimmerle
09beb1a5c0
Adds support to MULTIPART_NAME variable
2015-07-21 15:54:49 -03:00
Felipe Zimmerle
954e275b32
Adds support to MULTIPART_FILENAME variable
2015-07-21 15:42:24 -03:00
Felipe Zimmerle
abec93263b
Adds support to MULTIPART_CRLF_LF_LINES variable
2015-07-21 15:29:13 -03:00
Felipe Zimmerle
21f4c49a0f
Adds support to MATCHED_VAR_NAME variable
2015-07-21 14:32:05 -03:00
Felipe Zimmerle
b089c44c1a
Adds support to MATCHED_VARS_NAMES variable
2015-07-21 14:24:05 -03:00
Felipe Zimmerle
09867791c7
Adds support to MATCHED_VARS variable
2015-07-21 14:21:49 -03:00
Felipe Zimmerle
9d69501961
Adds support to MATCHED_VAR variable
2015-07-21 12:02:14 -03:00
Felipe Zimmerle
9c066e3198
Adds support to the INBOUND_DATA_ERROR variable and SecRequestBodyLimit direc.
2015-07-21 10:02:33 -03:00
Felipe Zimmerle
95c2fed89c
Adds support to severity action and HIGHEST_SEVERITY variable
2015-07-21 01:09:13 -03:00
Felipe Zimmerle
e189055ec3
Adds support to GeoIP operator and variables.
2015-07-20 21:05:14 -03:00
Felipe Zimmerle
41bf1490b7
Adds MODSEC_BUILD variable
2015-07-20 20:43:07 -03:00
Felipe Zimmerle
6e46c5c7f7
Adds support to FULL_REQUEST_LENGTH variable
2015-07-20 20:42:27 -03:00
Felipe Zimmerle
e516ded1e7
Adds FULL_REQUEST variable
2015-07-20 20:41:39 -03:00
Felipe Zimmerle
a264fc11c8
Adds support to the FILES_TMP_CONTENT variable
2015-07-17 15:50:49 -03:00
Felipe Zimmerle
b6cccc798a
Adds support to the FILES_SIZES variable
2015-07-17 15:46:54 -03:00
Felipe Zimmerle
ebb16d0439
Adds support to FILES_COMBINED_SIZE variable
2015-07-17 15:43:13 -03:00
Felipe Zimmerle
e1cff89b48
Adds support to FILES_NAMES variable
2015-07-17 15:38:04 -03:00
Felipe Zimmerle
fe6a9913c1
Adds test case for FILES variable
2015-07-17 15:35:51 -03:00
Felipe Zimmerle
d0b7a9966d
Adds support to the ENV variable
2015-07-15 12:34:06 -03:00
Felipe Zimmerle
27252bc801
Adds support to the variable DURATION
2015-07-15 12:34:06 -03:00
Felipe Zimmerle
8c408ebcd7
Adds support to AUTH_TYPE variable
2015-07-15 12:33:59 -03:00
Felipe Zimmerle
d86427f1dd
Minor fix on the auditlog regression tests
2015-07-14 16:42:03 -03:00
Felipe Zimmerle
f0624bb089
Adds support to ARGS_GET_NAMES variable
2015-07-14 16:41:55 -03:00
Felipe Zimmerle
e7ec09623d
Adds support to ARGS_POST_NAMES variable
2015-07-14 16:41:36 -03:00
Felipe Zimmerle
bc0553e726
Adds support to the variable ARGS_NAMES
2015-07-14 15:22:42 -03:00
Felipe Zimmerle
92c132b64c
Adds support to the ARGS_GET variable
2015-07-14 15:22:42 -03:00
Felipe Zimmerle
492526cfc5
Minor fix on the actions test case
2015-07-14 15:22:34 -03:00
Felipe Zimmerle
85f065363d
Adds support to the variable ARGS_POST
2015-07-14 14:28:14 -03:00
Felipe Zimmerle
228a5ce7cc
Adds support to ARGS_COMBINED_SIZE variable
2015-07-14 14:17:12 -03:00
Felipe Zimmerle
9f869a6aab
Adds test case for the variable ARGS
2015-07-14 01:35:46 -03:00
Felipe Zimmerle
f13a1bd880
Adds support the Parallel audit log index creation
...
The index is now being generated.
2015-07-14 00:33:57 -03:00
Felipe Zimmerle
96a777a5cf
Adds initial serial audit logging support
...
Serial logging following the format used on ModSecurity 2.9.
2015-07-14 00:33:50 -03:00
Felipe Zimmerle
5e33a1a3c4
Opens auditlog files and directories with the correct mode
...
Respecting the directives: SecAuditLogStorageDir and SecAuditLogFileMode
2015-07-10 19:08:28 -03:00
Felipe Zimmerle
c9620ac50f
Writes audit log in parallel mode
...
First version still missing the index among other things
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
693238b235
Process the log phase independent of disruptive actions
...
Disruptive actions was making the log phase to not be processed.
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
1ddb36a781
Adds SecComponentSignature configuration directive
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
2138dd1369
Adds method setConnectorInformation to ModSecurity class
...
For the purpose of log it is necessary for modsecurity to understand which
'connector' is consuming the API.
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
aa8dc9115b
Adds first version of Assay's materialization in a JSON format
...
That format will be used by the audit logs.
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
278b513933
Adds protocol and http version to processUri method's signature
...
Protocol and http version will be further used to fill some variables
and the audit log.
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
2109910848
Adds support to the server ID generation
...
The server ID is a sha-1 identifier generated from the mac address of the first
ethernet device plus the server name. The process is the same used by
ModSecurity 2.9
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
aadbacf854
Adds basic regression test for AuditLog functionalities
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
7ea9ff8836
Code cosmetic: Having the code following our coding style
...
This commit also update some methods parameters to const.
2015-07-08 17:33:29 -03:00
Felipe Zimmerle
73154b51a1
Adds processLogging phase to regression tests
...
Regression tests was not processing the 'LoggingPhase'. It was stopping in the
'ResponseBodyPhase'. As we are implementing the AuditLogs this phase is now
mandatory.
2015-07-08 15:17:40 -03:00
Chaim Sanders
f262b404cc
Fixed issue #905 that dealt with compilation on c++ 5.x >
2015-07-03 17:00:46 -04:00
Felipe Zimmerle
95cb4c56ab
Very first commit: libmodsecurity
...
Check the README.md file for further information about the libmodsecurity.
2015-06-26 14:35:15 -03:00
