Martin Vierula
ab5658f2d4
Fix: worst-case time in implementation of four transformations
2023-07-25 05:50:16 -07:00
Martin Vierula
3f0971666f
CHANGES entry for previous PR
2023-07-10 07:30:14 -07:00
martinhsv
fea6e6d60b
Merge pull request #2901 from airween/v3/pcrelimittx
...
Set TX:MSC_PCRE_LIMITS_EXCEEDED variable is limits exceeded
2023-07-07 17:31:20 -04:00
martinhsv
2cb6344bf8
Merge pull request #2916 from martinhsv/v3/master
...
Make MULTIPART_PART_HEADERS accessible to lua
2023-06-14 14:52:31 -04:00
Martin Vierula
f812a3d725
Make MULTIPART_PART_HEADERS accessible to lua
2023-06-14 09:28:04 -07:00
martinhsv
85c8760774
Merge pull request #2915 from martinhsv/v3/master
...
Fix: Lua scripts cannot read whole collection at once
2023-06-13 17:27:23 -04:00
Martin Vierula
63bbf624dc
Remove check-static from macos builds
2023-06-13 13:51:54 -07:00
Martin Vierula
b8e1aedef3
Fix: Lua scripts cannot read whole collection at once
2023-06-13 06:41:40 -07:00
martinhsv
b84f32d6f2
Merge pull request #2909 from martinhsv/v3/master
...
Fix: quoted Include config with wildcard
2023-05-31 08:47:31 -04:00
Martin Vierula
938707d117
Fix: quoted Include config with wildcard
2023-05-30 09:32:07 -07:00
Ervin Hegedüs
4403a163c4
Set TX:MSC_PCRE_LIMITS_EXCEEDED variable is limits exceeded
2023-05-14 17:26:08 +02:00
Martin Vierula
2121938c51
Change some parms to reference-to-const to satisfy cppcheck
2023-05-11 15:06:25 -07:00
Martin Vierula
da8782ce72
Minor whitespace adjustment
2023-05-11 07:37:43 -07:00
Martin Vierula
fdeaf17c67
CHANGES entry for previous PR
2023-05-10 06:08:59 -07:00
Martin Vierula
1ca282a5e6
Add exclusions due to newer cppcheck version
2023-05-09 12:42:30 -07:00
Martin Vierula
f8ec873376
github workflow: update macos version to macos-11
2023-05-09 07:14:09 -07:00
martinhsv
09a135baab
Merge pull request #2736 from brandonpayton/add-regex-match-limits-and-error-reporting
...
Add isolated PCRE match limits as a layer of ReDoS defense
2023-05-09 06:09:28 -07:00
Martin Vierula
62bbd7b078
Correction to previous cppcheck suppression adjustment
2023-05-08 09:44:44 -07:00
Martin Vierula
95c7009b88
Add cppcheck suppressions
2023-05-05 13:29:41 -07:00
Martin Vierula
1078a7cfab
Change some parms from pass-by-value to reference-to-const
2023-04-29 13:21:00 -07:00
Martin Vierula
8d91a5084f
github workflow: toggle pcre2 instead of ssdeep in Ubuntu tests
2023-04-29 09:26:09 -07:00
Martin Vierula
4fac8d72f4
Address some constParameter complaints from cppcheck
2023-04-28 08:20:37 -07:00
Martin Vierula
e9277e199a
CHANGES entry for previous PR
2023-04-28 06:18:05 -07:00
martinhsv
4050c840f5
Merge pull request #2868 from grnet/v3/fix-multimatch-chain
...
Fix meta-actions not being applied if multiMatch is enabled in the chain starter rule
2023-04-27 14:13:28 -07:00
Marios Levogiannis
12add9aef0
Fix meta-actions not being applied if multiMatch is enabled in the chain starter rule
...
Meta-actions can only be used in non-chained rules or in the chain starter
rule of a rule chain. The m_chainedRuleParent member of the RuleWithActions
class is NULL only if the rule is not chained or if it is the chain starter
rule of a rule chain.
Fixes #2867 .
2023-04-27 19:43:01 +03:00
Martin Vierula
808148ce02
CHANGES entry and cppcheck suppression adjustment for prev PR
2023-04-25 15:17:13 -07:00
martinhsv
5b709d9da7
Merge pull request #2866 from grnet/v3/fix-multimatch-tags
...
Fix tags not being populated in audit log when multiMatch is enabled
2023-04-25 07:45:41 -07:00
Martin Vierula
7ca5719526
CHANGES entry for previous PR
2023-04-24 11:33:37 -07:00
martinhsv
7cf0445ad4
Merge pull request #2870 from airween/v3/multipartpartheaderfix
...
Set correct line end in case of `MULTIPART_PART_HEADER` variable
2023-04-24 06:59:16 -07:00
Ervin Hegedüs
6623c0ae29
Changed strip methodology to MULTIPART_PART_HEADERS
2023-04-23 17:32:26 +02:00
Ervin Hegedüs
6fbdee9ff0
Merge branch 'v3/master' of https://github.com/SpiderLabs/ModSecurity into v3/multipartpartheaderfix
2023-04-23 17:17:29 +02:00
martinhsv
a830ef634f
Merge pull request #2894 from martinhsv/v3/master
...
Configure: use AS_ECHO_N instead echo -n
2023-04-20 11:55:46 -07:00
Martin Vierula
8d62ac4b04
Configure: use AS_ECHO_N instead echo -n
2023-04-20 07:28:21 -07:00
martinhsv
6fc270e225
Merge pull request #2891 from martinhsv/v3/master
...
Adjust position of memset from 2890
2023-04-19 14:20:32 -07:00
Martin Vierula
b9eb39af83
Adjust position of memset from 2890
2023-04-19 08:13:48 -07:00
Martin Vierula
09568351d9
CHANGES entry for previous PR
2023-04-18 10:59:57 -07:00
martinhsv
5365a17c5e
Merge pull request #2846 from tomsommer/patch-1
...
Also test empty lines
2023-04-18 06:14:10 -07:00
Martin Vierula
f8db5fc85e
Remove no-longer-needed cppcheck suppressions
2023-04-17 19:56:00 -07:00
Martin Vierula
a5320add21
Refactoring: remove two unneeded local vars from multipart parser
2023-04-17 12:29:40 -07:00
Martin Vierula
9ea50a4973
Change arg from pass-by-value (satisify cppcheck)
2023-04-17 07:43:38 -07:00
Martin Vierula
c34bd91a42
CHANGES: Preparing for next version
2023-04-16 16:22:40 -07:00
Martin Vierula
205dac0e8c
Change release version to v3.0.9
2023-04-12 10:45:09 -07:00
Martin Vierula
49c0561265
CHANGES: wording update
2023-04-12 06:00:20 -07:00
Martin Vierula
dbe107e280
Update some copyright notices
2023-04-11 17:26:09 -07:00
Brandon Payton
d875738bdb
Add PCRE error tests for rx operator
2023-04-11 13:47:04 -04:00
Brandon Payton
6f1bd27fe7
Move var into conditional block where used
2023-04-11 13:47:04 -04:00
Brandon Payton
23a0e26171
Give PCRE error vars initial value
2023-04-11 13:47:04 -04:00
Brandon Payton
f3d8198b84
Respond to code review feedback
2023-04-11 13:47:02 -04:00
Brandon Payton
0c42ee229e
Switch to simpler PCRE error flags
2023-04-11 13:44:07 -04:00
Brandon Payton
8c4b7c18e2
Fix some style issues in regex util header
2023-04-11 13:40:42 -04:00
