brectanus
c066e8b3c4
Fixed VAR_CACHE/VAR_DONT_CACHE values with reasons for DONT.
...
Added a DEBUG_MEM define to disable optimization and for future enhcement.
Prevented "counting" vars from being cached.
Prevented vars from being cached unless they are marked "available" in phase.
Now use var->value as the cache hash key as a unique value.
Fixed which pools we are using for rule processing.
Updated regression tests for tfns.
Updated regression test script to handle extra APR_POOL_DEBUG output.
See #364 .
2008-07-30 22:35:52 +00:00
brectanus
40b6cd3ebe
Cleanup. See #364 .
2008-07-29 05:47:14 +00:00
brectanus
dc043e82f2
Update versions for the 2.5.6 release.
2008-07-29 04:46:45 +00:00
brectanus
6ebc5ad6e7
Transformation caching fixes. See #364 .
2008-07-29 00:18:16 +00:00
brectanus
e1342ff011
Backport trunk changes for changeset:1072 and changeset:1073 to 2.5, but leave out the error filter code until more testing is completed. See #498 .
2008-06-05 16:55:53 +00:00
brectanus
896ae59e1f
Re-enable error output filter with a fix after more testing/tracing of code. See #498 .
...
Update versions to ready for release of 2.5.5.
2008-06-03 20:28:05 +00:00
brectanus
0c3f6bd2c2
Change version/date for release of 2.5.4.
2008-05-07 16:25:07 +00:00
brectanus
6dea0f90da
Update version to 2.5.3 for tagging.
2008-04-24 16:59:18 +00:00
brectanus
8e75cdb884
Update versions for release.
2008-04-02 16:10:47 +00:00
brectanus
e13d3dab8b
Make sure all filehandles are closed at the end of a trasaction. See #464 and #465 .
...
Fixes a few typos in some error messages when we are over the limits.
2008-03-28 20:00:37 +00:00
brectanus
6b970c9185
Added back support for HTTP_* targets by aliasing it to REQUEST_HEADERS:*.
...
Fixed the severity warning message to only be displayed at a warn log level.
2008-03-19 21:31:41 +00:00
brectanus
b2cf7d1329
Change version to 2.5.1 for tagging.
2008-03-14 23:03:13 +00:00
brectanus
d38f5da865
Change branch version back to -rc1 for re-taging.
2008-03-07 20:50:00 +00:00
brectanus
5e08b6e4d3
2.5.1-breach2 not 2.5.0-breach2
2008-03-07 20:46:16 +00:00
brectanus
57e8fc57d9
Change version to 2.5.1-breach2 for appliance.
2008-03-07 20:41:27 +00:00
brectanus
024e854725
Fixed a bug in transformation caching, which would prevent a match in certian cases.
...
Updated docs on "pass" action to explicitly state that we execute all targets.
2008-03-07 20:23:16 +00:00
brectanus
69a547ccf9
Create a 2.5.1-breach1 for the M1100.
2008-03-05 18:16:23 +00:00
brectanus
20274563fb
Make a severity in a default action just a warning instead of a fatal error.
2008-03-04 22:55:39 +00:00
brectanus
abbab078d5
Fix the module name macro to not end in "-" when there is no "-rc", etc.
2008-03-04 22:40:35 +00:00
brectanus
1e991d6fcd
Add searching for lua in /usr/lib{64|32}.
...
Do not default to using -Werror (warnings are errors).
2008-02-27 23:18:03 +00:00
brectanus
1fbf0c97f2
Update CHANGES, versions and dates for 2.5.0.
2008-02-15 22:51:01 +00:00
brectanus
cc2110b187
Updates to build on Windows with MS VC++ 8.
2008-02-13 07:10:54 +00:00
brectanus
f428d37680
Cleanup - remove extraneous whitespace and tabs.
2008-02-07 21:45:05 +00:00
brectanus
fd8f4e319f
Update CHANGES and versions for 2.5.0-rc3.
2008-02-05 00:55:16 +00:00
brectanus
588b4fba81
Fix apr_size_t formatting. Do not bother with formatting errors on solaris.
2008-01-29 22:15:48 +00:00
brectanus
f8adea949c
Implemented SecUploadFileMode. See #448 .
2008-01-24 22:10:37 +00:00
brectanus
00731cc70f
Update versions in preparation for 2.5.0-rc2.
2008-01-22 07:00:32 +00:00
brectanus
b5033e6e29
It is 2008 now :)
2008-01-11 00:00:31 +00:00
brectanus
4e7c243c39
Make libxml2 *required*.
2007-12-19 18:13:41 +00:00
brectanus
8360aacc22
Use use new msr->rule_was_intercepted flag. See #425 .
2007-12-17 19:58:35 +00:00
ivanr
b9a28882b2
Enhanced allow.
2007-12-17 11:22:47 +00:00
brectanus
cbf79d43ba
Update version to ready for 2.5.0-rc1.
2007-12-12 23:08:14 +00:00
brectanus
715a8eae58
Implement SecMarker. See #416 .
2007-12-11 17:53:50 +00:00
ivanr
c25071b832
Initial experimental implementation of SecRequestEncoding. See #390 for more details.
2007-12-03 14:04:53 +00:00
brectanus
dcdce0cbc5
Added matching rules to audit log data. See #93 .
2007-11-30 00:52:21 +00:00
ivanr
575e86388a
Implemented SecRequestBodyNoFilesLimit ( #103 ).
2007-11-29 11:41:48 +00:00
ivanr
ab6a81fe7a
Remove unused reqbody_status from modsec_rec.
2007-11-29 10:46:12 +00:00
brectanus
800cfc2cc2
Added missing #else block for printf attributes.
2007-11-27 00:17:50 +00:00
brectanus
e47fdeb420
Changed %p formatter to APRs %pp (wish that was documented).
...
Marked msr_log() as a printf style function so GNU compiler can check formatting types.
Fixed a few other warnings with msr_log() formatters.
2007-11-26 22:53:51 +00:00
brectanus
9447ae67b8
Added placeholder support for skipAfter so that it works with removed rules. See #258 .
2007-11-26 22:27:15 +00:00
ivanr
b163864ba7
Implemented SecComponentSignature.
2007-11-26 16:05:56 +00:00
ivanr
e467d3cac0
Unified messages in the error log and in the audit log.
2007-11-26 15:39:37 +00:00
brectanus
e45ea12fc8
Fix warnings on Solaris and/or 64bit builds.
2007-11-02 22:31:47 +00:00
brectanus
9efa02f423
Change ctl parameters to be case insensitive.
...
Initial implementation of ctl:removeRuleById. See #259 .
2007-10-16 00:14:42 +00:00
brectanus
793b576701
Added support for MATCHED_VAR and MATCHED_VAR_NAME. See #123 .
2007-10-15 16:50:36 +00:00
brectanus
f3a8854fe9
Mark any error conditions/alerts as 'relevant'.
...
Clean up/add error messages where this can happen.
2007-09-27 21:18:23 +00:00
ivanr
9ed3cf9e5a
Added support for partial response body processing.
2007-09-21 23:23:11 +00:00
ivanr
2a707d4370
Enable our output filters to intercept bodies of error responses ( #65 ).
2007-09-21 19:06:54 +00:00
brectanus
53011819d4
Cleanup some doc formatting.
...
Prepare trunk for use as 2.5.0-devN tree.
2007-09-14 21:41:34 +00:00
brectanus
9cfdd8f0d2
Rename TX_SEVERITY to HIGHEST_SEVERITY, fix and document.
2007-08-09 14:32:02 +00:00
