github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2026-01-13 15:07:10 +03:00
Code Issues Packages Projects Releases Wiki Activity
466 Commits 55 Branches 109 Tags
ebea284ec4760a1195052151e1db5b1bf22972e1
Commit Graph

64 Commits

Author SHA1 Message Date
brectanus
e13d3dab8b Make sure all filehandles are closed at the end of a trasaction. See #464 and #465. 
Fixes a few typos in some error messages when we are over the limits.
 2008-03-28 20:00:37 +00:00
brectanus
6b970c9185 Added back support for HTTP_* targets by aliasing it to REQUEST_HEADERS:*. 
Fixed the severity warning message to only be displayed at a warn log level.
 2008-03-19 21:31:41 +00:00
brectanus
b2cf7d1329 Change version to 2.5.1 for tagging. 2008-03-14 23:03:13 +00:00
brectanus
d38f5da865 Change branch version back to -rc1 for re-taging. 2008-03-07 20:50:00 +00:00
brectanus
5e08b6e4d3 2.5.1-breach2 not 2.5.0-breach2 2008-03-07 20:46:16 +00:00
brectanus
57e8fc57d9 Change version to 2.5.1-breach2 for appliance. 2008-03-07 20:41:27 +00:00
brectanus
024e854725 Fixed a bug in transformation caching, which would prevent a match in certian cases. 
Updated docs on "pass" action to explicitly state that we execute all targets.
 2008-03-07 20:23:16 +00:00
brectanus
69a547ccf9 Create a 2.5.1-breach1 for the M1100. 2008-03-05 18:16:23 +00:00
brectanus
20274563fb Make a severity in a default action just a warning instead of a fatal error. 2008-03-04 22:55:39 +00:00
brectanus
abbab078d5 Fix the module name macro to not end in "-" when there is no "-rc", etc. 2008-03-04 22:40:35 +00:00
brectanus
1e991d6fcd Add searching for lua in /usr/lib{64|32}. 
Do not default to using -Werror (warnings are errors).
 2008-02-27 23:18:03 +00:00
brectanus
1fbf0c97f2 Update CHANGES, versions and dates for 2.5.0. 2008-02-15 22:51:01 +00:00
brectanus
cc2110b187 Updates to build on Windows with MS VC++ 8. 2008-02-13 07:10:54 +00:00
brectanus
f428d37680 Cleanup - remove extraneous whitespace and tabs. 2008-02-07 21:45:05 +00:00
brectanus
fd8f4e319f Update CHANGES and versions for 2.5.0-rc3. 2008-02-05 00:55:16 +00:00
brectanus
588b4fba81 Fix apr_size_t formatting. Do not bother with formatting errors on solaris. 2008-01-29 22:15:48 +00:00
brectanus
f8adea949c Implemented SecUploadFileMode. See #448. 2008-01-24 22:10:37 +00:00
brectanus
00731cc70f Update versions in preparation for 2.5.0-rc2. 2008-01-22 07:00:32 +00:00
brectanus
b5033e6e29 It is 2008 now :) 2008-01-11 00:00:31 +00:00
brectanus
4e7c243c39 Make libxml2 *required*. 2007-12-19 18:13:41 +00:00
brectanus
8360aacc22 Use use new msr->rule_was_intercepted flag. See #425. 2007-12-17 19:58:35 +00:00
ivanr
b9a28882b2 Enhanced allow. 2007-12-17 11:22:47 +00:00
brectanus
cbf79d43ba Update version to ready for 2.5.0-rc1. 2007-12-12 23:08:14 +00:00
brectanus
715a8eae58 Implement SecMarker. See #416. 2007-12-11 17:53:50 +00:00
ivanr
c25071b832 Initial experimental implementation of SecRequestEncoding. See #390 for more details. 2007-12-03 14:04:53 +00:00
brectanus
dcdce0cbc5 Added matching rules to audit log data. See #93. 2007-11-30 00:52:21 +00:00
ivanr
575e86388a Implemented SecRequestBodyNoFilesLimit (#103). 2007-11-29 11:41:48 +00:00
ivanr
ab6a81fe7a Remove unused reqbody_status from modsec_rec. 2007-11-29 10:46:12 +00:00
brectanus
800cfc2cc2 Added missing #else block for printf attributes. 2007-11-27 00:17:50 +00:00
brectanus
e47fdeb420 Changed %p formatter to APRs %pp (wish that was documented). 
Marked msr_log() as a printf style function so GNU compiler can check formatting types.
Fixed a few other warnings with msr_log() formatters.
 2007-11-26 22:53:51 +00:00
brectanus
9447ae67b8 Added placeholder support for skipAfter so that it works with removed rules. See #258. 2007-11-26 22:27:15 +00:00
ivanr
b163864ba7 Implemented SecComponentSignature. 2007-11-26 16:05:56 +00:00
ivanr
e467d3cac0 Unified messages in the error log and in the audit log. 2007-11-26 15:39:37 +00:00
brectanus
e45ea12fc8 Fix warnings on Solaris and/or 64bit builds. 2007-11-02 22:31:47 +00:00
brectanus
9efa02f423 Change ctl parameters to be case insensitive. 
Initial implementation of ctl:removeRuleById.  See #259.
 2007-10-16 00:14:42 +00:00
brectanus
793b576701 Added support for MATCHED_VAR and MATCHED_VAR_NAME. See #123. 2007-10-15 16:50:36 +00:00
brectanus
f3a8854fe9 Mark any error conditions/alerts as 'relevant'. 
Clean up/add error messages where this can happen.
 2007-09-27 21:18:23 +00:00
ivanr
9ed3cf9e5a Added support for partial response body processing. 2007-09-21 23:23:11 +00:00
ivanr
2a707d4370 Enable our output filters to intercept bodies of error responses (#65). 2007-09-21 19:06:54 +00:00
brectanus
53011819d4 Cleanup some doc formatting. 
Prepare trunk for use as 2.5.0-devN tree.
 2007-09-14 21:41:34 +00:00
brectanus
9cfdd8f0d2 Rename TX_SEVERITY to HIGHEST_SEVERITY, fix and document. 2007-08-09 14:32:02 +00:00
brectanus
648037fdb5 Added TX_SEVERITY variable. See #60. 2007-08-08 22:11:02 +00:00
brectanus
fe8c564ed0 Added MODSEC_BUILD variable. See #38. 2007-08-08 18:25:03 +00:00
brectanus
9695f2b816 Improvements in transformation cache (add options, document). 
Update CHANGES.
 2007-08-03 20:25:30 +00:00
brectanus
72832c1b32 Working on cache enhancements. See trac #14. 2007-08-02 20:25:06 +00:00
brectanus
7fbf664ec8 Added cygwin to list of compilers that do not support hidden visibility attribute. 2007-07-02 14:49:56 +00:00
brectanus
b58efb3466 Update CHANGES. 
Reversion from 2.2. to 2.5.
Update @pmFromFile to base relative filenames off of rule file path.
 2007-06-20 19:58:01 +00:00
brectanus
81d0f84ad3 Update copyright text to Breach Security, Inc. 
Merge in changes from branches/2.1.x
 2007-06-14 16:05:45 +00:00
ivanr
74738b29b0 Added new directive (SecPdfProtectMethod) to enable the user to choose between 
using token redirection (falling back on forced download in some cases) and
forced download (in all cases).
 2007-06-14 15:26:08 +00:00
brectanus
46d7a5ec6f Move transformation cache rec def re.h from modsecurity.h 2007-06-11 21:15:14 +00:00