github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-09-29 11:16:33 +03:00
Code Issues Packages Projects Releases Wiki Activity
2,755 Commits 55 Branches 109 Tags
dba73f53676594dfcbf2c617aff3598b65c14316
Commit Graph

2755 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Felipe Zimmerle
e2bd87d07d Fix minor parser errors 2017-03-06 15:02:04 -03:00
Felipe Zimmerle
c3cb23f47d Removes the ';' from the x-www-form-urlencoded body-processor comparison 2017-03-06 15:02:03 -03:00
Felipe Zimmerle
d6363607aa Accept quoted regexp in the collection selection 2017-03-06 15:02:03 -03:00
Felipe Zimmerle
39761ce7b8 Discards the `charset' from the C-T while checking for body processors 
Issue #1330
 2017-03-06 15:02:03 -03:00
Felipe Zimmerle
7ab192e90f Using method instead of procol in the audit logs. 
Issue #1331
 2017-03-06 15:02:03 -03:00
Felipe Zimmerle
fcad290152 Having the DebugLogs using the SharedFile schema 2017-03-06 15:02:03 -03:00
Felipe Zimmerle
7f9cd76619 Improvements on the SharedFiles class 
examples/multiprocess_c/multi
 2017-03-06 15:02:03 -03:00
Felipe Zimmerle
01c13da510 Fix segfault due to invalid memory access on SharedFiles class 
Issue #1318
 2017-03-06 15:02:03 -03:00
David Testé
87f6b478fb Fix typo in returned string 2017-03-06 15:02:03 -03:00
David Testé
cc25390dc9 Fix copy/paste typo 2017-03-06 15:02:03 -03:00
Felipe Zimmerle
027d50b76b Adds first version of `processContentOffset' 
This commit also includes an example application on how to use the
`processContentOffset' method.
 2017-03-06 15:02:02 -03:00
Felipe Zimmerle
7aae5dc183 Fix Regex::searchAll to behave like global modifier 2017-03-06 15:02:02 -03:00
Felipe Zimmerle
4d66481bfa travis: Installs cppcheck on MacOS X 2017-03-06 15:02:02 -03:00
Felipe Zimmerle
616cf84c31 Adds check-static to travis.yaml 2017-03-06 15:02:02 -03:00
Felipe Zimmerle
4ad3574cf2 Adds offset regression tests and assorted fixes on var's offsets 2017-03-06 15:02:02 -03:00
Felipe Zimmerle
795994bb0e Adds support to error_log in the regression tests 2017-03-06 15:02:02 -03:00
Felipe Zimmerle
ae8c2a4865 Adds ZenHub Badge to Readme 2017-03-06 15:02:02 -03:00
Felipe Zimmerle
073b0f6d6a Small changes in the README, including: having ModSecurity logo 2017-03-06 15:02:02 -03:00
Felipe Zimmerle
aba68a7b6a Adds ModSec log to the git repository 2017-03-06 15:02:01 -03:00
Felipe Zimmerle
efb90bb554 Adds OWASP rules to the gitignore list 2017-03-06 15:02:01 -03:00
Felipe Zimmerle
71a9677f38 Adds configure.h to system.cc in oder to read the MACOSX def 2017-03-06 15:02:01 -03:00
Felipe Zimmerle
09cfa2869f Removes dup on travis build matrix 2017-03-06 15:02:01 -03:00
Felipe Zimmerle
44121bdee3 Updates secrules-language-tests 2017-03-06 15:02:01 -03:00
Felipe Zimmerle
158ec7b2e1 Adds support to resources on the unit tests 2017-03-06 15:02:01 -03:00
Felipe Zimmerle
b021c15e4b Adds a little more build options to the travis file 2017-03-06 15:02:01 -03:00
Felipe Zimmerle
c06daba398 Adds support for curl resource on the regression tests 2017-03-06 15:02:01 -03:00
Felipe Zimmerle
f9552ede2b Adds missing file 2017-03-06 15:02:01 -03:00
Felipe Zimmerle
36ab4b952f Fix lmdb compilation issue 2017-03-06 15:02:00 -03:00
Felipe Zimmerle
6f47462110 Fix compilation when YAJL is not present 2017-03-06 15:02:00 -03:00
Felipe Zimmerle
9d33990550 Very first travis file 2017-03-06 15:02:00 -03:00
Felipe Zimmerle
d851699529 Adds references to the collection variables 2017-03-06 15:02:00 -03:00
Felipe Zimmerle
e95efa05cc Fix assorted memory and static analysis errors 2017-03-06 15:02:00 -03:00
Felipe Zimmerle
8d0583eda4 Increments the cppcheck suppression list 2017-03-06 15:02:00 -03:00
Felipe Zimmerle
f40a6edec8 Adds valgrind suppression list 2017-03-06 15:02:00 -03:00
Felipe Zimmerle
f2d149fc5f Extends the direct access model to other collections 2017-03-06 15:02:00 -03:00
Felipe Zimmerle
ca24b6bb06 PoC: Adds support to direct access on ARGS collection 2017-03-06 15:01:59 -03:00
Felipe Zimmerle
17e5a63577 Removes memory leak on the "offset" feature 2017-03-06 15:01:59 -03:00
Felipe Zimmerle
c1f11ab4e5 Cosmetics: assorted fixes on the coding style 2017-03-06 15:01:59 -03:00
Felipe Zimmerle
a88dc8efa9 Changes the check script to detect segfaults 2017-03-06 15:01:59 -03:00
Felipe Zimmerle
ff65d618e4 Adds missing Makefile.am file 2017-03-06 15:01:59 -03:00
Felipe Zimmerle
ecbf292f6d Adds first PoC for the operator offset feature 2017-03-06 15:01:59 -03:00
Felipe Zimmerle
9a8fc3116a Instantiates the Class variable earlier 
Avoid the instantiation for every call
 2017-03-06 15:01:59 -03:00
Felipe Zimmerle
ba6b972ca8 Makes global collection allowed to be set by setVar 2017-03-06 15:01:59 -03:00
Felipe Zimmerle
b516cc6de1 Adds operation unset to setVar action 2017-03-06 15:01:59 -03:00
Felipe Zimmerle
e95555132e Contionuation of 1 time variable patch 
Now we have almost 100% of the transaction variables hosted on the
new schema. Variable modifcators (count and exclusion) are not yet
supported on the new schema. Notice that setvar is now using the
parser.
 2017-03-06 15:01:58 -03:00
Felipe Zimmerle
703da3c4f0 Adds PoC about 1-time variable resolution and draft for offset 
There is no need for the variable purely associated with the
transaction (transient) be part of collection that demands
lookups. Also, those variables will held the concept of offset:
The offset from the first byte of the request till the start of
the variable.
 2017-03-06 15:01:52 -03:00
Felipe Zimmerle
6abbb7e91e Fix regular expression test case and updates the test list 
Repoted on #1295
 2017-03-06 15:01:52 -03:00
Felipe Zimmerle
1e8b374117 Removes the depency on bison/flex if it is not a parser build 2017-03-06 15:01:52 -03:00
Felipe Zimmerle
3eccfaf1f6 Disables parser generation on all builds 
The parser generation is now an configure option
 2017-03-06 15:01:52 -03:00
Felipe Zimmerle
03d0570e99 Deletes the Rule object in case of a parser failure 2017-03-06 15:01:52 -03:00