brectanus
f428d37680
Cleanup - remove extraneous whitespace and tabs.
2008-02-07 21:45:05 +00:00
brectanus
7250e4d03c
Fix crash when there is no parameter to ENV target var. See #459 .
2008-02-04 18:22:51 +00:00
brectanus
9fb03d277d
Fixing code based on review comments...
...
Cleaned up what vars are cacheable.
Added parens around "*foo++" where it clarified the operation to be "*(foo++)".
Added " at VARNAME" to operator matches where needed.
Escaped var->name in the var generation (user-supplied data).
Marked a bunch of TODOs as ENHs instead.
Transformed some C++ style comments to C style.
Removed the %0-9 macros code which was commented out.
Optimized some ctl action code so that multiple ifs are else ifs.
Implemented some error messages marked as ENH.
Make commented out acmp debugging a configure-time option.
Cleanup GEO debug log messages.
Added relative filename support for geo dbs.
Added help text to Sec* directives.
2008-01-18 00:47:30 +00:00
brectanus
b5033e6e29
It is 2008 now :)
2008-01-11 00:00:31 +00:00
brectanus
4e7c243c39
Make libxml2 *required*.
2007-12-19 18:13:41 +00:00
brectanus
2203428507
Prefer "offset" to "pos".
2007-12-12 18:43:40 +00:00
brectanus
aff6900539
Initial full pass through code to fix issues with 64-bit/mismatch sign/mismatch size printf style formatters.
...
Still need to look more into how we are handling time and convert to apr_time_t (or time_t) where appropriate.
Still need to look into our use of 'long' as windows is LLP64 where 'long' is still 32-bit.
2007-11-15 19:09:14 +00:00
brectanus
e45ea12fc8
Fix warnings on Solaris and/or 64bit builds.
2007-11-02 22:31:47 +00:00
brectanus
793b576701
Added support for MATCHED_VAR and MATCHED_VAR_NAME. See #123 .
2007-10-15 16:50:36 +00:00
brectanus
b784e6cb73
Change from TX:LAST_MATCHED_VAR_NAME to MATCHED_VAR. See #123 .
2007-10-03 00:23:46 +00:00
brectanus
63a47c370e
Prefer %d string formatter to %i so we do not get warnings on some platforms.
2007-09-27 21:34:29 +00:00
ivanr
0769f2378c
More multipart improvements. Added MULTIPART_MISSING_SEMICOLON.
2007-09-07 13:16:40 +00:00
ivanr
608f7f2b44
Fix LF line detection, add MULTIPART_CRLF_LINE, MULTIPART_CRLF_LF_LINES.
2007-08-20 15:25:05 +00:00
ivanr
baf6f59dff
Multipart parsing improvements.
2007-08-17 15:47:33 +00:00
brectanus
e275162463
Quiet "warning: int format, pid_t arg" type warnings.
2007-08-13 17:49:37 +00:00
ivanr
222f1f6f78
Cleanup. MULTIPART_STRICT_ERROR now returns 1 on parsing error too.
2007-08-10 15:04:42 +00:00
ivanr
c85773b343
Added MULTIPART_UNMATCHED_BOUNDARY. Not very reliable, as it detects anything that looks like a boundary, which means any line that begins with -- but we don't think it's a boundary.
2007-08-10 09:59:57 +00:00
brectanus
8f6385f784
Added logdata action (still needs byte limit). See #40 .
2007-08-10 00:22:15 +00:00
brectanus
9cfdd8f0d2
Rename TX_SEVERITY to HIGHEST_SEVERITY, fix and document.
2007-08-09 14:32:02 +00:00
ivanr
c520886e10
Detect and prevent multipart evasion.
2007-08-09 10:50:53 +00:00
ivanr
cb0cb93752
Sorted variables in the registration code.
2007-08-09 10:17:42 +00:00
brectanus
648037fdb5
Added TX_SEVERITY variable. See #60 .
2007-08-08 22:11:02 +00:00
brectanus
f41c27a28c
Added ARGS_GET, ARGS_POST, ARGS_GET_NAME, ARGS_POST_NAMES variables. See #136 .
2007-08-08 20:49:51 +00:00
brectanus
fe8c564ed0
Added MODSEC_BUILD variable. See #38 .
2007-08-08 18:25:03 +00:00
brectanus
72832c1b32
Working on cache enhancements. See trac #14 .
2007-08-02 20:25:06 +00:00
ivanr
8de8e44e09
Removed RESPONSE_CONTENT_ENCODING, which never worked as intended.
2007-06-20 11:10:47 +00:00
brectanus
81d0f84ad3
Update copyright text to Breach Security, Inc.
...
Merge in changes from branches/2.1.x
2007-06-14 16:05:45 +00:00
brectanus
a68eb04884
Add geo lookup support. See #22 .
2007-05-11 16:14:11 +00:00
brectanus
2aa6e61605
Exported API for registering custom variables. See #120 .
...
Simple example in api/mod_var_remote_host_port.c
2007-05-03 03:26:30 +00:00
ivanr
20c0b11dd9
Added experimental RESPONSE_CONTENT_LENGTH, RESPONSE_CONTENT_TYPE.
2007-05-02 10:02:20 +00:00
ivanr
3661a294a4
Added experimental RESPONSE_CONTENT_ENCODING.
2007-05-02 09:06:39 +00:00
brectanus
00dcb2714f
Add the PCRE_DOLLAR_ENDONLY option when compiling regular expression for the @rx operator and variables. (trac #57 )
2007-04-05 01:54:03 +00:00
ivanr
8aeff06fc2
Fixed faulty REQUEST_FILENAME.
2007-03-01 12:17:17 +00:00
brectanus
f4fb4ed4f6
Updates to quiet some compiler warnings.
2007-03-01 11:49:56 +00:00
brectanus
79d232ccff
Fixed some casting issues for compiling on NetWare (Guenter Knauf).
2007-03-01 11:34:13 +00:00
ivanr
3f80fdac3b
Import ModSecurity 2.1.0-rc7
2007-02-06 12:29:22 +00:00
