brectanus
f173301b39
Worked around mod_jk issue where a 401 response was not including the WWW-Authentication header (MODSEC-16).
2008-09-15 19:51:06 +00:00
brectanus
7b5d35c462
Added ability to use ctl:requestBodyAccess=off in phase:1 to avoid limit check.
...
Added regression tests for this as well.
2008-09-10 19:45:13 +00:00
brectanus
a8933475b7
Added additional check for XML well formed.
2008-09-10 18:32:24 +00:00
brectanus
a920630d1c
Added a comment.
2008-09-10 17:39:18 +00:00
brectanus
d257fd7910
Change from ctl:requestBodyBuffering to ctl:forceRequestBodyVariable.
2008-09-10 17:11:20 +00:00
ivanr
d6cbd4d973
Tidy up.
2008-09-10 14:15:37 +00:00
ivanr
29948745e9
Document css_inplace_decode().
2008-09-10 12:44:41 +00:00
ivanr
c469947b43
Tidy up.
2008-09-10 11:34:16 +00:00
brectanus
335f2cfb0b
Updated docs to point out some features are not available on all OSes. MODSEC-9
2008-09-05 16:18:00 +00:00
brectanus
2c07abaf7f
Typo in SecRuleUpdateActionById example.
2008-09-05 15:29:25 +00:00
brectanus
28bda503a3
Make sure we fail to validate DTD/schema after a parsing error. Fixes MODSEC-5.
2008-09-03 22:16:42 +00:00
brectanus
d33d6132c3
Remove declaration of an unused variable.
2008-09-03 21:20:06 +00:00
brectanus
f2f160e10c
Allow ability to force request body buffering to memory. Fixes MODSEC-2.
2008-09-03 20:42:28 +00:00
brectanus
a25269a5e5
Updated the CHANGES.
2008-09-03 18:06:14 +00:00
brectanus
866a809129
Fixed MODSEC-2 by using the msr->hostname (ap_get_server_name(r)) vs r->hostname in the log.
2008-09-02 23:43:15 +00:00
brectanus
c47c3583e0
Added mlogc source.
2008-09-02 23:10:36 +00:00
ivanr
ecd1750cce
Tidy up the code for the performance-measurement mode. Remove the per-phase measurements, which don't seem to work (at least not in my case).
2008-09-01 09:36:31 +00:00
ivanr
3dd0185d3c
From trunk: make PERFORMANCE_MEASUREMENT more accurate.
2008-08-29 16:14:17 +00:00
ivanr
795f47d56f
Carried over the documentation changes from the trunk.
2008-08-27 17:14:28 +00:00
brectanus
ca0d625bef
Update configure to better find lua libs.
2008-08-18 16:00:29 +00:00
brectanus
15b043e1c2
Update a regression test due to changed error message.
2008-08-15 21:04:12 +00:00
brectanus
383f4aa2f8
Update test stup with new msr_log_* wrappers.
2008-08-15 20:45:28 +00:00
brectanus
efba0e87a4
Backport cssDecode part 2. See #512 .
2008-08-15 20:44:36 +00:00
brectanus
b6657a4b93
Update CHANGES.
...
Sync up docs.
2008-08-15 20:25:27 +00:00
brectanus
e26d44a6bd
Allow disabling processing of request body size limit in phase 1. See #518 .
2008-08-15 20:21:25 +00:00
brectanus
aa948b6639
Backport t:cssDecode to 2.5.
2008-08-15 20:14:16 +00:00
brectanus
abbde8f1e7
Added XML warn/error output to debug log. See #519 .
2008-08-15 19:58:02 +00:00
brectanus
77aa445d27
Add parity transformations. See #516 .
2008-08-14 23:49:39 +00:00
brectanus
e3ddb2403b
Updated regression suite to use full path to LoadModule.
2008-08-08 22:50:47 +00:00
brectanus
492ffd9897
Sync up branches/2.5.x and trunk.
2008-07-31 22:36:24 +00:00
brectanus
0616064a29
Update doc fixes from trunk.
2008-07-31 20:32:33 +00:00
brectanus
bab6fdba35
Prepare 2.5.x branch for next release.
2008-07-31 20:30:03 +00:00
brectanus
5c06f31001
Added mlogc to CHANGES.
2008-07-31 17:05:31 +00:00
brectanus
eadc2832fe
Cleanup regression suite to make it a bit more user-friendly.
2008-07-31 16:59:37 +00:00
brectanus
bc40fdb054
Fix a typo.
2008-07-31 16:57:44 +00:00
brectanus
4e6aaeb864
Added configure for convieniance of those w/o auto tools.
2008-07-31 15:07:36 +00:00
ivanr
90444d4513
Update documentation to use correct tfn function in examples. Warn users that REQUEST_BASENAME, _FILENAME, _URI and _URI_RAW variables are not transformed by default.
2008-07-31 11:00:11 +00:00
ivanr
3f26e3d384
Tidy up.
2008-07-31 10:09:35 +00:00
ivanr
7edd9cc7f7
Update licensing headers in all source code files.
2008-07-31 09:30:59 +00:00
ivanr
b9ed23da21
Updated trademarks.
2008-07-31 09:12:00 +00:00
ivanr
4ac7163096
Mark transformation caching as deprecated.
2008-07-31 09:08:40 +00:00
ivanr
2f6d1f873e
Remove description of transformation caching issues from CHANGES.
2008-07-31 09:04:05 +00:00
ivanr
58c8845f78
Change licence file to Unix format.
2008-07-31 08:43:43 +00:00
brectanus
c066e8b3c4
Fixed VAR_CACHE/VAR_DONT_CACHE values with reasons for DONT.
...
Added a DEBUG_MEM define to disable optimization and for future enhcement.
Prevented "counting" vars from being cached.
Prevented vars from being cached unless they are marked "available" in phase.
Now use var->value as the cache hash key as a unique value.
Fixed which pools we are using for rule processing.
Updated regression tests for tfns.
Updated regression test script to handle extra APR_POOL_DEBUG output.
See #364 .
2008-07-30 22:35:52 +00:00
ivanr
31869670c1
Tidy up whitespace. More characters in the commit messages than in the change itself! Way, way, more. This is what happens when you work too much.
2008-07-29 15:46:45 +00:00
brectanus
5f39e6828b
Update readme to point to new exception filename.
2008-07-29 15:40:37 +00:00
brectanus
507f17e75f
Update licensing.
2008-07-29 15:38:32 +00:00
ivanr
4332d5f19f
Execute msr_log only if the debug log level is higher or equal to that of the log message.
2008-07-29 15:19:07 +00:00
brectanus
40b6cd3ebe
Cleanup. See #364 .
2008-07-29 05:47:14 +00:00
brectanus
dde8e6c6a0
Typo.
2008-07-29 04:52:58 +00:00
