chaizhenhua
d5a6df167c
promote modsecurity_handler from CONTENT_PHASE to PREACCESS_PHASE, so that we can process and pass request to backend without internal redirect.
2013-01-06 14:28:10 +08:00
Chai Zhenhua
fc7b3ef223
Fixed valgrind complain
2013-01-06 13:47:52 +08:00
Breno Silva
213cd1e840
Fixed: detect comma plus white space as a cookie separator - change variable names
2013-01-05 12:11:18 -04:00
Breno Silva
80146b2c74
Fixed: detect comma plus white space as a cookie separator
2013-01-05 09:48:49 -04:00
chaizhenhua
86e0455724
Fixed compile error
2013-01-05 08:27:58 +08:00
Breno Silva
48030ca057
Merge pull request #22 from chaizhenhua/read_client_request_body
...
Fixed: ngx_http_read_client_request_body returned unexpected buffer type
2013-01-04 15:35:35 -08:00
chaizhenhua
82d44071d4
Fixed 'request body is larger ...' error
2013-01-04 23:50:27 +08:00
chaizhenhua
231921ce25
Revert "Fixed request body is larger"
...
This reverts commit ee47cccb63588fef6294351abdf07e7b914404d9.
2013-01-04 23:15:54 +08:00
chaizhenhua
ee47cccb63
Fixed request body is larger
2013-01-04 23:10:05 +08:00
Breno Silva
3f6c14de59
Fixed msc_test crash using pcre jit in some platforms
2013-01-02 17:30:48 -04:00
Breno Silva
f6bf1a2b92
Fixed compat issue with automake >= 1.12
2013-01-02 00:22:38 -04:00
Breno Silva
973bfae335
Fixed compat lua_load() with lua 5.2.x
2012-12-27 11:48:59 -04:00
Breno Silva
21b8770484
Added dirs to build nginx on Fedora
2012-12-26 20:22:20 -04:00
chaizhenhua
344ec7dfa0
Added cleanup handler for finalize request
2012-12-25 10:16:51 +08:00
chaizhenhua
5f97bec8d3
read client body in a better manner
2012-12-25 09:34:13 +08:00
chaizhenhua
77ccd0b7b5
Fixed: ngx_http_read_client_request_body returned unexpected buffer type
...
- after post request is processed
the calling to ngx_http_read_client_request_body will ingore
r->request_body_in_file_only option, which is not expected.
2012-12-24 22:18:13 +08:00
Breno Silva
cc6e8532ff
Merge pull request #18 from chaizhenhua/remotes/trunk
...
Added drop action for nginx
2012-12-21 04:42:10 -08:00
chaizhenhua
6815d17690
Added drop action for nginx
2012-12-20 12:32:58 +08:00
Breno Silva
f920303e8b
Fixed change from double to single quotes in find_pcre.m4
2012-12-17 14:45:50 -04:00
Breno Silva
7ed0c305f3
Fixed MODSEC-364
2012-12-11 10:21:00 -04:00
Breno Silva
18e0c45e38
Fixed MODSEC-360
2012-12-09 17:44:37 -04:00
Breno Silva
adca6e4b24
Merge pull request #13 from hideaki/cpf_verify_fix
...
fixed bugs in cpf_verify
2012-12-08 05:32:37 -08:00
Hideaki Hayashi
c98da92cf7
fixed bugs in cpf_verify
2012-12-07 16:59:26 -08:00
Breno Silva
fc45a3fe3b
Fixed compilation issue under Windows when APR ipv6 is disabled
2012-12-01 08:21:04 -04:00
Breno Silva
bd3cb0c72d
MODSEC-359
2012-11-28 23:14:57 -04:00
Breno Silva
4564c65489
MODSEC-359
2012-11-28 23:10:52 -04:00
Breno Silva
5c6bdb90fc
change msc_release.h to 2.7.2
2012-11-28 09:05:25 -04:00
Breno Silva
c4e9dbaed7
added APR_HAVE_ARPA_INET_H pre-compile macro
2012-11-28 09:02:54 -04:00
Breno Silva
ac4815f492
modsecurity_config.h was empty breaking SecUploadModeFile directive
2012-11-27 00:19:31 -04:00
Breno Silva
2f7a1ac0e9
Merge pull request #12 from gwroblew/remotes/trunk
...
remotestrunk
2012-11-14 03:24:09 -08:00
Greg Wroblewski
a4c75689fd
remotestrunk
2012-11-13 12:54:54 -08:00
Breno Silva
0265607df3
Merge pull request #11 from gwroblew/remotes/trunk
...
remotestrunk
2012-11-13 11:57:33 -08:00
Greg Wroblewski
42aa054089
remotestrunk
2012-11-13 11:44:38 -08:00
Breno Silva
c2c491861a
fix for issues in ssn_verify such as infinite loop.
2012-11-13 15:29:06 -04:00
Breno Silva
bd3d07024e
Merge pull request #10 from hideaki/verifyssn_infinite_loop
...
fix for issues in ssn_verify such as infinite loop.
2012-11-13 09:47:20 -08:00
Hideaki Hayashi
7beb244df3
fix for issues in ssn_verify such as infinite loop.
2012-11-12 16:56:09 -08:00
Breno Silva
d7280c61f0
Fixed NGINX compilation issues
2012-11-09 18:35:29 -04:00
Breno Silva
8560642b90
Update CHANGES
2012-11-09 16:42:24 -04:00
Breno Silva
dc8d464e9f
Merge pull request #9 from gwroblew/remotes/trunk
...
Fixed crash with invalid commands and marked IIS server as non-virtual, ...
2012-11-09 10:39:07 -08:00
Breno Silva
b31f83b292
Merge pull request #8 from hideaki/strmatch_coredump
...
handle invalid escape sequence passed to strmatch operator
2012-11-09 10:36:40 -08:00
Greg Wroblewski
74b8daaadd
Fixed crash with invalid commands and marked IIS server as non-virtual, so many commands would work (like SecDataDir).
2012-11-08 23:49:04 -08:00
Hideaki Hayashi
9e6dddff8e
handle invalid escape sequence passed to strmatch operator
2012-11-07 16:15:56 -08:00
Breno Silva
2b1c1ad74a
Merge pull request #7 from gwroblew/remotes/trunk
...
Fixed build on Apache 2.4.
2012-11-06 14:38:15 -08:00
Greg Wroblewski
f14eaeb3d0
Fixed build on Apache 2.4.
2012-11-06 14:33:06 -08:00
Breno Silva
ee11125303
Merge pull request #6 from gwroblew/remotes/trunk
...
Minor changes to IIS module.
2012-11-06 12:05:20 -08:00
Greg Wroblewski
2336cf9294
Minor changes to IIS module.
2012-11-06 11:58:05 -08:00
Breno Silva
ce3cf00a2c
Fixed byte conversion issue during logging under zlinux
2012-10-31 17:05:41 -04:00
Breno Silva
6d9327f4a8
Fix error_message type
2012-10-30 21:14:51 -04:00
Breno Silva
a01b85b896
Update CHANGES and doc/
2012-10-30 20:13:18 -04:00
Breno Silva
eb41bd44f8
Change names of HMAC feature to HASH
2012-10-30 18:21:01 -04:00