Felipe Zimmerle
|
b5a43871e6
|
Changes library namespace from ModSecurity to modsecurity
|
2015-12-01 10:55:59 -03:00 |
|
Felipe Zimmerle
|
09a958544d
|
Makes @geoLookup optional depending on the availability of libGeoIP
|
2015-11-20 11:09:05 -03:00 |
|
Andrew Hutchings
|
c035e76ede
|
Avoid segfault if parser `ref' is empty
|
2015-11-17 11:28:47 -03:00 |
|
Andrew Hutchings
|
f65b08b066
|
Fix parser to accept redirect action without single quote
|
2015-11-17 11:08:39 -03:00 |
|
Felipe Zimmerle
|
e641c3cc17
|
Huge improve in the variables resolution time
|
2015-11-03 22:44:59 -03:00 |
|
Felipe Zimmerle
|
48704c27a9
|
Removes some memory leaks
|
2015-10-30 18:59:08 -03:00 |
|
Felipe Zimmerle
|
3fff343009
|
Adds missing variables
|
2015-10-19 23:04:52 -03:00 |
|
Felipe Zimmerle
|
e65f0db13b
|
Fix on the variable parser
|
2015-10-19 19:31:23 -03:00 |
|
Felipe Zimmerle
|
e57ee8908f
|
Searches for included configuration using the resource policy
|
2015-10-07 15:26:08 -03:00 |
|
Felipe Zimmerle
|
e54ef72051
|
Looks for external resources in the same path of the rule
|
2015-10-06 09:21:30 -03:00 |
|
Felipe Zimmerle
|
5cc9e94505
|
Splits operator into OPERATOR and FREE_TEXT on sec lang grammar
|
2015-10-02 12:07:18 -03:00 |
|
Felipe Zimmerle
|
df819dc43b
|
Removes SPACE token form the GRAMMAR
|
2015-10-02 11:30:05 -03:00 |
|
Felipe Zimmerle
|
54c51e2512
|
Fix parser shift/reduce problem on state 133
|
2015-10-02 11:03:04 -03:00 |
|
Felipe Zimmerle
|
03eabd9c12
|
Fix shift/reduce conflict in the sec lang grammar.
|
2015-10-01 17:36:18 -03:00 |
|
Felipe Zimmerle
|
941b9e75c4
|
Adds support to rules with actions without quotes
|
2015-10-01 14:55:55 -03:00 |
|
Felipe Zimmerle
|
0087a602f1
|
Fix phases execution
|
2015-09-30 18:48:38 -03:00 |
|
Felipe Zimmerle
|
8255ce86ca
|
Adds reference to filename and line number to lexer errors
|
2015-09-30 14:36:33 -03:00 |
|
Felipe Zimmerle
|
900af2cd48
|
Adds possibility to use include with wildcards and env vars
|
2015-09-29 14:06:13 -07:00 |
|
Felipe Zimmerle
|
cb9524ffd7
|
Adds support to collection in the parser
|
2015-09-29 13:14:36 -07:00 |
|
Felipe Zimmerle
|
d084ab5f2d
|
Fix the "line counting" on parser errors
|
2015-09-29 12:22:23 -03:00 |
|
Felipe Zimmerle
|
70e2a4b379
|
Adds support to include path between quotes
|
2015-09-29 10:43:28 -03:00 |
|
Felipe Zimmerle
|
b497091017
|
Cosmetics: Fix coding style
|
2015-09-28 16:32:59 -03:00 |
|
Felipe Zimmerle
|
9d60dc6df8
|
Adds macro expansion for all operators
|
2015-09-16 11:25:07 -03:00 |
|
Felipe Zimmerle
|
c425b24ffb
|
Extends redirect action to support url without quotes
|
2015-09-15 18:25:15 -03:00 |
|
Felipe Zimmerle
|
23d843259d
|
Fix rule.h include on modsecurity.cc and seclang-parser.yy
|
2015-09-15 16:05:29 -03:00 |
|
Felipe Zimmerle
|
2a8f45b895
|
Adds transformations removeComments and replaceComments to the seclang parsers
|
2015-09-11 12:41:09 -03:00 |
|
Felipe Zimmerle
|
3c53869915
|
Adds transformation normalisePath to seclang parser
|
2015-09-09 23:02:07 -03:00 |
|
Felipe Zimmerle
|
92563da930
|
Adds t:utf8toUnicode and variable XML to the seclang parser
|
2015-09-09 22:51:19 -03:00 |
|
Felipe Zimmerle
|
736183b7f1
|
Adds ctl:forceRequestBodyVariable to the seclang parser
|
2015-09-09 22:43:18 -03:00 |
|
Felipe Zimmerle
|
4095ae7b52
|
Adds action accuracy to the parser
|
2015-09-09 22:26:35 -03:00 |
|
Felipe Zimmerle
|
1079b5ba54
|
Adds action maturity to the parser
|
2015-09-09 22:19:07 -03:00 |
|
Felipe Zimmerle
|
09651baf9a
|
Adds action ver to the seclang parser
|
2015-09-09 22:10:45 -03:00 |
|
Felipe Zimmerle
|
254b29265e
|
Adds action expirevar to the parser and fix the line counting
|
2015-09-09 18:31:37 -03:00 |
|
Felipe Zimmerle
|
ee8b886371
|
Adds parser support to ctl:[auditEngine|ruleEngine]
|
2015-09-09 17:51:53 -03:00 |
|
Felipe Zimmerle
|
ec6a5a0cd2
|
Adds support to t:sha1 and t:hexEncode at seclang parser
|
2015-09-09 17:13:07 -03:00 |
|
Felipe Zimmerle
|
d1fa2cfa7b
|
Parser: Fix redirect action and adds SecRule first line-only comment syle
|
2015-09-09 15:10:38 -03:00 |
|
Felipe Zimmerle
|
5c3a4b608d
|
Adds support to SecMarker and skipAfter
|
2015-09-08 10:06:37 -03:00 |
|
Felipe Zimmerle
|
b048794f4e
|
Adds support to unconditional rules
|
2015-09-04 15:55:53 -03:00 |
|
Felipe Zimmerle
|
010c18f63f
|
Adds support to SecDefaultAction configuration directive
|
2015-09-04 10:56:04 -03:00 |
|
Felipe Zimmerle
|
f2ed890ea6
|
Now accept SecRules regardless of the letter case
|
2015-09-03 11:09:40 -03:00 |
|
Felipe Zimmerle
|
45d81e1c04
|
Adds sanity check to the rule id action
|
2015-09-03 09:38:12 -03:00 |
|
Felipe Zimmerle
|
a63aa50f1b
|
Changes the default operator to be @rx not @pm
For some reason the default operator was @pm, which was a huge mistake.
The default operator is @rx, thanks for Sanders who have noticed that.
|
2015-09-02 18:31:02 -03:00 |
|
Felipe Zimmerle
|
ea4cd53221
|
Accepts phases with its name instead of a number
|
2015-09-02 18:31:02 -03:00 |
|
Felipe Zimmerle
|
035040cd13
|
Adds sanity check to confirm that the rule has an ID and it is not duplicated
|
2015-09-02 18:30:41 -03:00 |
|
Felipe Zimmerle
|
fa4f72d90d
|
Adds support to ctl:auditLogParts variation
|
2015-09-02 10:55:29 -03:00 |
|
Felipe Zimmerle
|
e89e395a32
|
Fix various minor issues on the auditlog schema
|
2015-08-27 17:50:42 -03:00 |
|
Felipe Zimmerle
|
24b7d72666
|
DebugLogs are now being redirected to the correct files
|
2015-08-27 15:36:56 -03:00 |
|
Felipe Zimmerle
|
01542e28c3
|
Allows blank line (or line with space) at the end of a rules file
|
2015-08-25 15:50:40 -03:00 |
|
Felipe Zimmerle
|
e76af0eab9
|
Correctly handling nginx configuration merge
|
2015-08-25 15:50:27 -03:00 |
|
Felipe Zimmerle
|
004ef066ed
|
Fix rules chain and action execution
- Rules chains are respecting the phase of the first rule in chain.
- The actions are only executed if all chain match.
|
2015-08-25 13:44:20 -03:00 |
|