308 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
ivanr	fa4738e865	Lua: Preserve entire scripts, not just main(). This allows for more complex logic to be written as the user can now use functions. It also allows room for future expansion.	2007-12-20 09:21:35 +00:00
brectanus	3860a702ab	Added support for unit testing operators. Only verifyCC tests written.	2007-12-20 01:40:29 +00:00
brectanus	3a8e0a4dfd	Some more reorg of tests.	2007-12-19 23:43:51 +00:00
brectanus	a04e03b2c7	Some reorg of tests.	2007-12-19 23:41:49 +00:00
brectanus	61e4623bae	Move around some code to make unit tests easier to build.	2007-12-19 20:44:56 +00:00
brectanus	2103fb560b	Rename msc-test to msc_test.	2007-12-19 20:40:33 +00:00
brectanus	4e7c243c39	Make libxml2 *required*.	2007-12-19 18:13:41 +00:00
ivanr	6974a1c781	Fixed l_log to prevent percentage characters from Lua interfering with formatting.	2007-12-19 17:47:08 +00:00
brectanus	a0198a9e6c	Polish up docs for md5/sha1.	2007-12-19 17:20:23 +00:00
ivanr	f3fae3155d	Adjust Lua debugging levels to 8, to avoid logging at level 9 from skewing the results.	2007-12-19 17:13:02 +00:00
ivanr	80aa065d23	Document the Lua functionality added so far.	2007-12-19 17:07:24 +00:00
brectanus	e834a860dd	Avoid double close of DBM on error.	2007-12-19 16:43:27 +00:00
brectanus	a96cbc0f69	Merge in Lua to test framework.	2007-12-19 16:11:42 +00:00
ivanr	e357bb55af	Add quoting to unparsed rule generation.	2007-12-19 16:11:32 +00:00
ivanr	cdcb3bdb14	Lua: Added support for retrieving parametarised parameters (e.g. ARGS:p).	2007-12-19 15:46:45 +00:00
ivanr	4414cb8527	Lua: Support retrieval of individual variables from scripts.	2007-12-19 14:35:20 +00:00
ivanr	aef5a460b6	Fix Lua support. Enable logging from Lua scripts (using m.log()).	2007-12-19 12:50:21 +00:00
ivanr	e0c444953c	Update Makefile to compile with Lua support	2007-12-19 11:26:55 +00:00
ivanr	afd3cbf14f	Implemented SecRuleScript LUA_SCRIPT [ACTIONS].	2007-12-19 11:22:52 +00:00
ivanr	6f6934e9d3	Code polish.	2007-12-19 09:22:58 +00:00
brectanus	d2dee97a31	Fix jsDecode \xHH to verify HH is there and valid hex. See #439.	2007-12-19 00:31:08 +00:00
brectanus	5da9a05d1c	Remove the callback from the verifyCC regex (not used anymore).	2007-12-19 00:26:19 +00:00
brectanus	499c3f3167	Add initial unit testing framework. See #438.	2007-12-19 00:09:30 +00:00
brectanus	2657154eaa	Update docs for t:md5 and t:sha1 to note that they are in binary form and should be hex encoded to be human readable.	2007-12-18 22:50:01 +00:00
brectanus	8360aacc22	Use use new msr->rule_was_intercepted flag. See #425.	2007-12-17 19:58:35 +00:00
brectanus	a99357ad5b	Add ability to use <IfDefine MODSEC_2.5>. See #436.	2007-12-17 19:06:08 +00:00
ivanr	a703c9c626	Minor allow bug fix.	2007-12-17 15:11:18 +00:00
ivanr	dc081c5df1	Removed some code that implemented SecRequestEncoding. Left the directive in, as well as the structure member as they are harmless.	2007-12-17 15:09:59 +00:00
ivanr	b9a28882b2	Enhanced allow.	2007-12-17 11:22:47 +00:00
brectanus	9b0ce5ae67	Move an extraneous debug log line from level 4 to level 9.	2007-12-17 05:43:49 +00:00
brectanus	8a1687bf36	Make phase 5 more strict and catch an inherited disruptive action. See #429.	2007-12-17 05:13:49 +00:00
brectanus	5bd9e0640f	Add CHANGES entry. See #425.	2007-12-15 00:57:21 +00:00
brectanus	32100608e5	Handle actionset being NULL. See #66 and #429.	2007-12-15 00:42:39 +00:00
brectanus	05c8ccd07e	Moved modsecurity_crs_55_marketing.conf.	2007-12-14 23:31:33 +00:00
brectanus	d6beae556b	Should have moved this not added.	2007-12-14 23:30:27 +00:00
brectanus	f12cc94f90	Update props for rules.	2007-12-14 23:28:29 +00:00
brectanus	3c4eacf6f1	Update Core Rules to those in 2.1.4.	2007-12-14 23:23:46 +00:00
brectanus	4602f7d908	Remove tabs from CHANGES.	2007-12-14 22:52:29 +00:00
brectanus	9136d391d3	Forgoten CHANGES entry for last commit.	2007-12-14 22:50:01 +00:00
brectanus	476684e6ec	Stricter configuration parsing. See #66 and #429.	2007-12-14 22:45:01 +00:00
brectanus	cd51a10046	Allow all rules to run in phase 5. See #425.	2007-12-14 22:34:16 +00:00
brectanus	515290434c	Add 2.1.4 changes to trunk CHANGES.	2007-12-14 20:22:54 +00:00
brectanus	f68f0156c3	Cleanup CHANGES.	2007-12-14 20:20:18 +00:00
brectanus	5065852dfe	More efficient collection persistance and deletion on retrieval. See #345 and #426.	2007-12-14 19:53:23 +00:00
brectanus	4c11791a94	Escape cache value in log.	2007-12-14 00:42:04 +00:00
brectanus	aa68fff104	Fixed decoding \9 with t:escapeSeqDecode. See #423.	2007-12-14 00:30:25 +00:00
brectanus	8aa31fd099	Change jsDecodeuni to jsDecode which also decodes all the other JS escapes. See #193.	2007-12-14 00:19:46 +00:00
brectanus	b0de659133	Added t:jsDecodeUni handling unicode similar to t:urlDecodeUni. See #193.	2007-12-13 00:58:02 +00:00
brectanus	cbf79d43ba	Update version to ready for 2.5.0-rc1.	2007-12-12 23:08:14 +00:00
brectanus	54cac6461b	Add IS_NEW and IS_EXPIRED collection variables. See #345.	2007-12-12 22:52:08 +00:00