github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-14 13:56:01 +03:00
Code Issues Packages Projects Releases Wiki Activity
1,857 Commits 55 Branches 109 Tags
Commit Graph

1857 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Felipe Zimmerle
09beb1a5c0 Adds support to MULTIPART_NAME variable 2015-07-21 15:54:49 -03:00
Felipe Zimmerle
954e275b32 Adds support to MULTIPART_FILENAME variable 2015-07-21 15:42:24 -03:00
Felipe Zimmerle
abec93263b Adds support to MULTIPART_CRLF_LF_LINES variable 2015-07-21 15:29:13 -03:00
Felipe Zimmerle
21f4c49a0f Adds support to MATCHED_VAR_NAME variable 2015-07-21 14:32:05 -03:00
Felipe Zimmerle
b089c44c1a Adds support to MATCHED_VARS_NAMES variable 2015-07-21 14:24:05 -03:00
Felipe Zimmerle
09867791c7 Adds support to MATCHED_VARS variable 2015-07-21 14:21:49 -03:00
Felipe Zimmerle
9d69501961 Adds support to MATCHED_VAR variable 2015-07-21 12:02:14 -03:00
Felipe Zimmerle
4f20f5bf74 Adds initial support to chained rules 2015-07-21 12:02:10 -03:00
Felipe Zimmerle
9c066e3198 Adds support to the INBOUND_DATA_ERROR variable and SecRequestBodyLimit direc. 2015-07-21 10:02:33 -03:00
Felipe Zimmerle
95c2fed89c Adds support to severity action and HIGHEST_SEVERITY variable 2015-07-21 01:09:13 -03:00
Felipe Zimmerle
e189055ec3 Adds support to GeoIP operator and variables. 2015-07-20 21:05:14 -03:00
Felipe Zimmerle
41bf1490b7 Adds MODSEC_BUILD variable 2015-07-20 20:43:07 -03:00
Felipe Zimmerle
6e46c5c7f7 Adds support to FULL_REQUEST_LENGTH variable 2015-07-20 20:42:27 -03:00
Felipe Zimmerle
e516ded1e7 Adds FULL_REQUEST variable 2015-07-20 20:41:39 -03:00
Felipe Zimmerle
a264fc11c8 Adds support to the FILES_TMP_CONTENT variable 2015-07-17 15:50:49 -03:00
Felipe Zimmerle
b6cccc798a Adds support to the FILES_SIZES variable 2015-07-17 15:46:54 -03:00
Felipe Zimmerle
ebb16d0439 Adds support to FILES_COMBINED_SIZE variable 2015-07-17 15:43:13 -03:00
Felipe Zimmerle
e1cff89b48 Adds support to FILES_NAMES variable 2015-07-17 15:38:04 -03:00
Felipe Zimmerle
fe6a9913c1 Adds test case for FILES variable 2015-07-17 15:35:51 -03:00
Felipe Zimmerle
5d5e10bfde Adds support for basic Multipart process 
Adjustments will be needed, for instance: the logging support is still missing
 2015-07-17 15:12:15 -03:00
Felipe Zimmerle
d0b7a9966d Adds support to the ENV variable 2015-07-15 12:34:06 -03:00
Felipe Zimmerle
27252bc801 Adds support to the variable DURATION 2015-07-15 12:34:06 -03:00
Felipe Zimmerle
33dff0f1bf Refactoring on the variables resoluvtion method 2015-07-15 12:34:06 -03:00
Felipe Zimmerle
8c408ebcd7 Adds support to AUTH_TYPE variable 2015-07-15 12:33:59 -03:00
Felipe Zimmerle
d86427f1dd Minor fix on the auditlog regression tests 2015-07-14 16:42:03 -03:00
Felipe Zimmerle
f0624bb089 Adds support to ARGS_GET_NAMES variable 2015-07-14 16:41:55 -03:00
Felipe Zimmerle
e7ec09623d Adds support to ARGS_POST_NAMES variable 2015-07-14 16:41:36 -03:00
Felipe Zimmerle
bc0553e726 Adds support to the variable ARGS_NAMES 2015-07-14 15:22:42 -03:00
Felipe Zimmerle
92c132b64c Adds support to the ARGS_GET variable 2015-07-14 15:22:42 -03:00
Felipe Zimmerle
492526cfc5 Minor fix on the actions test case 2015-07-14 15:22:34 -03:00
Felipe Zimmerle
85f065363d Adds support to the variable ARGS_POST 2015-07-14 14:28:14 -03:00
Felipe Zimmerle
228a5ce7cc Adds support to ARGS_COMBINED_SIZE variable 2015-07-14 14:17:12 -03:00
Felipe Zimmerle
76b769cc84 Decodes the url content before assing values to varibles 2015-07-14 13:54:56 -03:00
Felipe Zimmerle
b2954ff223 Fills ARGS variable even on POST 2015-07-14 01:35:52 -03:00
Felipe Zimmerle
9f869a6aab Adds test case for the variable ARGS 2015-07-14 01:35:46 -03:00
Felipe Zimmerle
80f13437e3 Refactoring on the variable read/store methods 
Now it is ready to received two (or more) variables with same key.
 2015-07-14 00:33:57 -03:00
Felipe Zimmerle
f13a1bd880 Adds support the Parallel audit log index creation 
The index is now being generated.
 2015-07-14 00:33:57 -03:00
Felipe Zimmerle
96a777a5cf Adds initial serial audit logging support 
Serial logging following the format used on ModSecurity 2.9.
 2015-07-14 00:33:50 -03:00
Felipe Zimmerle
001d5ebf7f Properly deal with classes destructors 
There are some classes such as AuditLog that demands a reference count. That is
needed because this class can be used by different instances of the Rules
classes.
 2015-07-13 14:16:48 -03:00
Felipe Zimmerle
0c98bdc80b Adds support to SecAuditLogParts 2015-07-10 19:08:32 -03:00
Felipe Zimmerle
5e33a1a3c4 Opens auditlog files and directories with the correct mode 
Respecting the directives: SecAuditLogStorageDir and SecAuditLogFileMode
 2015-07-10 19:08:28 -03:00
Felipe Zimmerle
c9620ac50f Writes audit log in parallel mode 
First version still missing the index among other things
 2015-07-10 18:37:48 -03:00
Felipe Zimmerle
693238b235 Process the log phase independent of disruptive actions 
Disruptive actions was making the log phase to not be processed.
 2015-07-10 18:37:48 -03:00
Felipe Zimmerle
5e80e001e5 Adds Components information to the audit logs 2015-07-10 18:37:48 -03:00
Felipe Zimmerle
1ddb36a781 Adds SecComponentSignature configuration directive 2015-07-10 18:37:48 -03:00
Felipe Zimmerle
4aa521df65 Adds SecRuleEngine state information to the audit logs 2015-07-10 18:37:48 -03:00
Felipe Zimmerle
75a9cfa273 Uses an enumeration to determine the state of the SecRuleEngine 2015-07-10 18:37:48 -03:00
Felipe Zimmerle
cb8d6249a8 Adds connector information to the audit logs 2015-07-10 18:37:48 -03:00
Felipe Zimmerle
2138dd1369 Adds method setConnectorInformation to ModSecurity class 
For the purpose of log it is necessary for modsecurity to understand which
'connector' is consuming the API.
 2015-07-10 18:37:48 -03:00
Felipe Zimmerle
e42e7545d7 Adds ModSecurity version information to the audit logs 2015-07-10 18:37:48 -03:00