brenosilva
d68731a38b
APR-Ipmatch operator
2011-04-16 21:25:30 +00:00
brenosilva
a9557a66cd
Add more char to escape in log_escape_re
2011-04-07 13:41:30 +00:00
brenosilva
0d32c17c30
Memory pool fixes and code cleanup
2011-04-03 03:57:02 +00:00
brenosilva
6031e7fdae
Improvements, bug fixes and cleanup from Tom Donavan
2011-04-02 23:10:16 +00:00
brenosilva
2ff42243fa
Add escape option to rsub and rbl improvements
2011-03-31 17:15:37 +00:00
brenosilva
8642c01344
gsb now saves the base url in tx.1 when match a full url
2011-03-30 17:58:54 +00:00
brenosilva
0c81610818
add util remove escape function and apply it for gsb
2011-03-30 17:25:46 +00:00
brenosilva
104f0de46e
New License
2011-03-30 14:12:44 +00:00
brenosilva
49732256f6
Improvements, fixes and new features
2011-03-25 13:51:13 +00:00
brenosilva
7bd27c4000
Gsb matched urls set into tx variable
2011-03-16 15:04:17 +00:00
brenosilva
56fc2ea714
MODSEC-148 fix issues
2010-12-22 13:57:44 +00:00
brenosilva
549f059480
move 2.5.13 into trunk
2010-12-08 18:58:18 +00:00
b1v1r
3a10f9fb8d
Fix autoconf header and include path so trunk builds.
2010-08-31 18:35:55 +00:00
b1v1r
08edc0c26f
Merge 2.5.x (2.5.12) changes into trunk.
2010-02-05 19:05:20 +00:00
ivanr
a4d5d50be9
Integrate with mod_log_config (MODSEC-108).
2010-02-01 11:01:17 +00:00
ivanr
853b1f9fc8
Convert 'normalise' into 'normalize' throughout, but support the previous version for backward compatibility (MODSEC-103)
2009-12-04 23:15:44 +00:00
b1v1r
3b12989683
Merge 2.5.x changes into trunk.
2009-11-07 00:06:26 +00:00
b1v1r
21ecf99dab
Merge 2.5.x changes into trunk.
2009-09-24 19:11:16 +00:00
b1v1r
826124b378
Merge 2.5.x changes to trunk.
2009-08-25 22:19:33 +00:00
b1v1r
dc0a2161ac
Merge 2.5.9 changes into trunk.
2009-03-12 15:31:10 +00:00
brectanus
b2c7424a96
Added a comment.
2008-09-10 17:39:18 +00:00
ivanr
2ee69ce468
Document css_inplace_decode().
2008-09-10 12:44:41 +00:00
brectanus
20cc395510
Added mlogc source.
2008-09-02 23:10:36 +00:00
brectanus
bb2e4b9a3e
Fix cssDecode. See #512 .
2008-08-14 23:37:40 +00:00
brectanus
10713fbd37
Sync up branches/2.5.x and trunk.
2008-07-31 22:36:24 +00:00
ivanr
ae40b8c213
Implemented cssDecode.
2008-07-16 13:08:12 +00:00
brectanus
f428d37680
Cleanup - remove extraneous whitespace and tabs.
2008-02-07 21:45:05 +00:00
brectanus
9fb03d277d
Fixing code based on review comments...
...
Cleaned up what vars are cacheable.
Added parens around "*foo++" where it clarified the operation to be "*(foo++)".
Added " at VARNAME" to operator matches where needed.
Escaped var->name in the var generation (user-supplied data).
Marked a bunch of TODOs as ENHs instead.
Transformed some C++ style comments to C style.
Removed the %0-9 macros code which was commented out.
Optimized some ctl action code so that multiple ifs are else ifs.
Implemented some error messages marked as ENH.
Make commented out acmp debugging a configure-time option.
Cleanup GEO debug log messages.
Added relative filename support for geo dbs.
Added help text to Sec* directives.
2008-01-18 00:47:30 +00:00
brectanus
b5033e6e29
It is 2008 now :)
2008-01-11 00:00:31 +00:00
brectanus
6dd6156466
Fixed returns for urlDecodeUni, urlDecode, urlEncode and normalisePathWin. See #439 .
2007-12-20 23:29:07 +00:00
brectanus
9551218d23
Fixed URL decoding with invalid encoding. See #439 .
2007-12-20 23:01:38 +00:00
brectanus
78f83198d0
Remove \0ooo support from t:escapeSeqDecode. See #423 .
2007-12-20 21:04:19 +00:00
ivanr
f64c7c39e8
Lua: Added support for scripting to @inspectFile.
2007-12-20 15:53:23 +00:00
brectanus
d2dee97a31
Fix jsDecode \xHH to verify HH is there and valid hex. See #439 .
2007-12-19 00:31:08 +00:00
brectanus
aa68fff104
Fixed decoding \9 with t:escapeSeqDecode. See #423 .
2007-12-14 00:30:25 +00:00
brectanus
8aa31fd099
Change jsDecodeuni to jsDecode which also decodes all the other JS escapes. See #193 .
2007-12-14 00:19:46 +00:00
brectanus
b0de659133
Added t:jsDecodeUni handling unicode similar to t:urlDecodeUni. See #193 .
2007-12-13 00:58:02 +00:00
brectanus
c8e5c7fcd5
Sync trunk from branches/2.1.x (merge in branch fixes).
2007-09-14 21:00:56 +00:00
brectanus
8f6385f784
Added logdata action (still needs byte limit). See #40 .
2007-08-10 00:22:15 +00:00
brectanus
fe8c564ed0
Added MODSEC_BUILD variable. See #38 .
2007-08-08 18:25:03 +00:00
brectanus
81d0f84ad3
Update copyright text to Breach Security, Inc.
...
Merge in changes from branches/2.1.x
2007-06-14 16:05:45 +00:00
brectanus
61238ca22f
Argh! That last one was not meant to be checked in - reverting 281.
2007-05-25 21:01:11 +00:00
brectanus
e11ff85421
Fixed log_escape_raw when length was <= 0
2007-05-25 20:56:03 +00:00
brectanus
eaa8e444dd
Fixed decoding full-width unicode in t:urlDecodeUni for ASCII range 0xFF01-0xFF5E. Probably need more work/testing. (See #122 )
2007-05-16 20:09:28 +00:00
brectanus
a68eb04884
Add geo lookup support. See #22 .
2007-05-11 16:14:11 +00:00
brectanus
cf024ded05
Fix segfault when logging NULL text during request reading errors and upcoming fix for sending alerts on such errors.
2007-03-05 22:12:34 +00:00
brectanus
f4fb4ed4f6
Updates to quiet some compiler warnings.
2007-03-01 11:49:56 +00:00
brectanus
79d232ccff
Fixed some casting issues for compiling on NetWare (Guenter Knauf).
2007-03-01 11:34:13 +00:00
ivanr
3f80fdac3b
Import ModSecurity 2.1.0-rc7
2007-02-06 12:29:22 +00:00
