Commit Graph

  • 1eea78d9de Merge pull request #3050 from marcstern/v2/mst/log_coll_key4 Marc Stern 2024-02-01 11:52:15 +01:00
  • 35e97b5145 When there's a problem writing a collection key (it's too big for instance), we have no info on the involved key. This adds the key name in the log (and its size, as this is the problem most of the time). Marc Stern 2024-02-01 11:48:21 +01:00
  • 569abcd64c Merge branch 'v2/master' of https://github.com/marcstern/ModSecurity into v2/master Marc Stern 2024-02-01 11:43:53 +01:00
  • 17b76b9fa9 Merge pull request #2997 from marcstern/v2/mst/target_log Marc Stern 2024-02-01 11:20:43 +01:00
  • 710cc994b9 Merge pull request #3012 from marcstern/v2/mst/except_noid Marc Stern 2024-02-01 11:18:54 +01:00
  • aac0bee2ea Merge pull request #3003 from marcstern/v2/mst/empty_action Marc Stern 2024-02-01 11:18:27 +01:00
  • 64b883bd82 Merge pull request #2946 from marcstern/v2/mst/issue610 Marc Stern 2024-02-01 11:10:27 +01:00
  • ac04a4483e Merge pull request #2953 from marcstern/v2/mst/optim1 Marc Stern 2024-02-01 11:09:31 +01:00
  • 26d2b0d069 Merge pull request #2954 from marcstern/v2/mst/optim2 Marc Stern 2024-02-01 11:08:09 +01:00
  • c2e20f6501 Merge pull request #2956 from marcstern/v2/mst/username Marc Stern 2024-02-01 11:03:48 +01:00
  • 85492324ad Merge pull request #2957 from marcstern/v2/mst/yajl_compat Marc Stern 2024-02-01 10:54:38 +01:00
  • b354c71403 Merge pull request #2960 from marcstern/v2/mst/mem_leak1 Marc Stern 2024-02-01 10:53:58 +01:00
  • 8f3ef37ed8 Merge pull request #2963 from marcstern/v2/mst/debug_conf Marc Stern 2024-02-01 10:53:09 +01:00
  • 7dae977e88 Merge pull request #2969 from marcstern/v2/mst/optim3 Marc Stern 2024-02-01 10:52:08 +01:00
  • c62e3a4ffc Merge pull request #2987 from marcstern/v2/mst/jit_not_init Marc Stern 2024-02-01 10:51:09 +01:00
  • ca5f5163b4 Merge pull request #3027 from StarryVae/comment-spell-fix Marc Stern 2024-02-01 10:50:38 +01:00
  • 5f44383236 Change release version to v3.0.12 v3.0.12 Ervin Hegedus 2024-01-30 16:43:48 +01:00
  • d648a44ff5 Merge pull request #3048 from airween/v3/encodedqm Ervin Hegedus 2024-01-30 16:30:25 +01:00
  • 5f28c2bb21 Change REQUEST_FILENAME behavior Ervin Hegedus 2024-01-30 12:21:45 +01:00
  • a859574bf2 Merge pull request #3041 from airween/v3/remoterulestls Marc Stern 2024-01-30 11:16:05 +01:00
  • b0e5892ff6 Merge pull request #3040 from airween/v2/remoterulestls Marc Stern 2024-01-30 11:15:51 +01:00
  • 9040893c04 Merge pull request #3042 from airween/v3/docsecurity_updates Ervin Hegedus 2024-01-28 12:50:31 +01:00
  • 6a3dc92cc8 Merge pull request #3043 from airween/v2/docsecurity_updates Ervin Hegedus 2024-01-28 09:39:13 +01:00
  • 91c535c96b Replace the organization name in references; change the security e-mail Ervin Hegedus 2024-01-28 09:40:40 +01:00
  • de4d97ea4e Replaced the organization name in references; changed the security e-mail Ervin Hegedus 2024-01-28 09:28:43 +01:00
  • ec8e800a6a Set the minimum security protocol version for SecRemoteRules Ervin Hegedus 2024-01-27 17:27:00 +01:00
  • b687f51840 Set the minimum security protocol version for SecRemoteRules Ervin Hegedus 2024-01-27 17:09:43 +01:00
  • 7aae94b286 Update README.md Ervin Hegedus 2024-01-27 00:18:30 +01:00
  • 43e4be4227 Merge branch 'SpiderLabs:v2/master' into v2/master Marc Stern 2024-01-09 09:02:20 +01:00
  • 3f8de775f9 Fix small comment spell wangkai19 2023-12-14 17:30:11 +08:00
  • 3e7227bfa1 github workflow: update macos version to macos-12 Martin Vierula 2023-12-08 10:31:45 -08:00
  • 1ced1047cc CHANGES: Preparing for next version Martin Vierula 2023-12-08 09:45:13 -08:00
  • bbde9381cb Change release version to v3.0.11 v3.0.11 Martin Vierula 2023-12-06 10:52:41 -08:00
  • 35969946ca Merge pull request #3024 from martinhsv/v3/master martinhsv 2023-12-06 12:16:21 -05:00
  • 4c7a9bd312 Add WRDE_NOCMD to wordexp call Martin Vierula 2023-12-06 08:16:39 -08:00
  • fcf205d599 fix: makes uri decode platform independent Matteo Pace 2023-11-08 17:32:41 +01:00
  • 5b094c0ce9 Merge pull request #3014 from martinhsv/v3/master martinhsv 2023-11-07 08:15:52 -05:00
  • c11b28292d Fix: validateDTD compile fails if when libxml2 not installed Martin Vierula 2023-11-06 20:35:05 -08:00
  • bacb0f3d76 Revert "avoid useless loops" Marc Stern 2023-11-02 13:30:16 +01:00
  • a6d3397b51 removeByTag wasn't executed if no rule id is present in the rule Marc Stern 2023-11-02 13:21:39 +01:00
  • cb4d7ae371 Adjust some copyright dates Martin Vierula 2023-10-31 06:23:19 -07:00
  • 285f7efdfa avoid useless loops Marc Stern 2023-10-31 13:01:19 +01:00
  • 9977870bc5 avoid useless loops Marc Stern 2023-10-31 12:55:07 +01:00
  • 0311da9f1b Merge pull request #3008 from martinhsv/v3/master martinhsv 2023-10-30 19:37:08 -04:00
  • beaa452302 Fix memory leak of validateDTD's dtd object Martin Vierula 2023-10-30 15:40:36 -07:00
  • a9edee3dbe const-ify some references in test folder Martin Vierula 2023-10-27 11:39:08 -07:00
  • de2d053d6e Remove unneeded cppcheck suppression Martin Vierula 2023-10-27 09:48:16 -07:00
  • 36adc58ea3 const-ify some references (satisfy cppcheck) Martin Vierula 2023-10-27 06:20:01 -07:00
  • b9836bcaa4 Merge pull request #3005 from martinhsv/v3/master martinhsv 2023-10-26 22:17:05 -04:00
  • b180de53bf Fix memory leaks in ValidateSchema Martin Vierula 2023-10-26 16:58:52 -07:00
  • 029fdedc67 useless (and now incorrect) check Marc Stern 2023-10-26 15:55:57 +02:00
  • 31dae62f41 Don't store empty string before macro and empty macro result Marc Stern 2023-10-26 15:00:10 +02:00
  • 608cd1d09d Avoid last loop and storing an empty value in case nothing after last %{..} macro Marc Stern 2023-10-26 14:21:32 +02:00
  • 6a24bc47d5 Ignore empty action instead of storing it Marc Stern 2023-10-26 09:22:22 +02:00
  • fd67c6eb1d Remove unneeded heap allocation in AnchoredSetVariable::set Martin Vierula 2023-10-25 06:07:26 -07:00
  • dc6cce5f0c refactoring and remove dead code in lmdb Martin Vierula 2023-10-24 06:36:18 -07:00
  • 3951ba0e48 CHANGES entry for previous PR Martin Vierula 2023-10-23 09:50:22 -07:00
  • 2fcd373107 Merge pull request #3001 from SpiderLabs/v3/dev/action_expirevar martinhsv 2023-10-23 11:41:12 -04:00
  • 5e17e6dfc4 Configure: correct log message typo Martin Vierula 2023-10-17 06:37:08 -07:00
  • 3e14a9a6d2 Merge branch 'SpiderLabs:v2/master' into v2/master Marc Stern 2023-10-17 14:07:27 +02:00
  • 5c9d8cd776 Add context info to error message Marc Stern 2023-10-17 14:06:56 +02:00
  • c060ab91bc Merge pull request #2996 from martinhsv/v2/master martinhsv 2023-10-16 15:48:31 -04:00
  • e4acb3c391 Allow lua version 5.4 Martin Vierula 2023-10-16 12:45:36 -07:00
  • 29dbf829cd Add CHANGES entry for previous merge Martin Vierula 2023-10-12 07:55:56 -07:00
  • 68683c328c Merge pull request #2975 from martinhsv/v2/master martinhsv 2023-10-12 10:47:08 -04:00
  • c63b5bea1d Change linux workflow to Ubuntu 22.04 Martin Vierula 2023-10-11 13:43:11 -07:00
  • 34809d8064 Add expirevar support for lmdb Martin Vierula 2023-10-10 10:31:52 -07:00
  • d644ebee0a Implemented msre_action_phase_validate() Marc Stern 2023-10-05 14:48:24 +02:00
  • 40c6f80ccf Avoid some useless code and memory allocation in case no macro is present Marc Stern 2023-10-03 16:50:12 +02:00
  • 118e1b3a44 Support expirevar for in-memory collection Martin Vierula 2023-09-29 10:58:43 -07:00
  • 1d9ad64a56 if WITH_PCRE2 id defined, jit was not initialized Marc Stern 2023-09-25 16:15:19 +02:00
  • 077d1bd0b7 if WITH_PCRE2 id defined, jit was not initialized Marc Stern 2023-09-25 16:00:17 +02:00
  • 135d1fa42b Merge pull request #2985 from martinhsv/v3/master martinhsv 2023-09-18 12:02:54 -04:00
  • af45ccd53f Fix: lmdb regex match on non-null-terminated string Martin Vierula 2023-09-18 08:27:41 -07:00
  • e9bf697c00 Merge branch 'SpiderLabs:v2/master' into v2/master Marc Stern 2023-09-18 15:27:46 +02:00
  • 375519d5f2 Merge pull request #2983 from martinhsv/v3/master martinhsv 2023-09-17 15:03:51 -04:00
  • dc2e38e242 Fix memory leaks in lmdb code (new'd strings) Martin Vierula 2023-09-17 11:36:08 -07:00
  • 8594cb8a7d Correct json for one regression test file Martin Vierula 2023-09-13 06:59:15 -07:00
  • 0dbdc2b3d0 Check return code of apr_procattr_io_set() Martin Vierula 2023-09-11 08:07:49 -07:00
  • a8b7b26983 Merge pull request #2958 from marcstern/v2/mst/rc_check martinhsv 2023-09-11 11:01:10 -04:00
  • d4310f54cc Configure: do not check for pcre1 if pcre2 requested Martin Vierula 2023-08-24 15:01:14 -07:00
  • 1cdc554d87 Merge pull request #57 from SpiderLabs/v2/master Marc Stern 2023-08-24 11:27:00 +02:00
  • 18efc80bdd Double memory allocation: 'current_targets' is allocated in ruleset->mp. 'rule->p1' is a copy of current_targets, but we strdup it in the same memory pool as 'current_targets'. So, simply assign 'current_targets' to 'rule->p1'. Marc Stern 2023-08-21 10:30:36 +02:00
  • eab780e992 typo Marc Stern 2023-08-21 10:01:46 +02:00
  • 931f8b6ed4 Update re_operators.c Marc Stern 2023-08-21 09:39:42 +02:00
  • 9c0d05f734 Update re_operators.c Marc Stern 2023-08-21 09:33:27 +02:00
  • afe4e12828 Update persist_dbm.c Marc Stern 2023-08-18 17:16:18 +02:00
  • 063fc9f5c8 Update msc_logging.c Marc Stern 2023-08-18 16:54:19 +02:00
  • ea1d78c80e Update msc_json.c Marc Stern 2023-08-18 16:48:25 +02:00
  • 1a552bcc5d Update msc_json.c Marc Stern 2023-08-18 16:47:00 +02:00
  • ba227fa731 Fix for https://github.com/SpiderLabs/ModSecurity/issues/610 Marc Stern 2023-08-16 16:54:55 +02:00
  • 82c69ccf49 Fix for DEBUG_CONF compile flag Marc Stern 2023-08-16 08:50:09 +02:00
  • 541707c0aa removed useless code Marc Stern 2023-08-16 08:28:12 +02:00
  • 25a60e259a Fixed 2 memory leaks Marc Stern 2023-08-16 08:25:50 +02:00
  • 7575eae3f5 Check return code of apr_procattr_io_set() Marc Stern 2023-08-14 16:57:21 +02:00
  • 0d5a8dec2a Compatibility with libyajl decoding the buffer inline Marc Stern 2023-08-11 17:41:04 +02:00
  • 0708339359 Centralized function to get user name, compatible with Linux & Windows (also with mpm-itk & mod_ruid2) Marc Stern 2023-08-11 17:22:24 +02:00
  • b3b33c9ff1 Revert "Centralized function compatible with Linux & Windows (also with mpm-itk & mod_ruid2) to get username" Marc Stern 2023-08-11 17:19:08 +02:00
  • c7b28f0e13 Centralized function compatible with Linux & Windows (also with mpm-itk & mod_ruid2) to get username Marc Stern 2023-08-11 17:17:59 +02:00
  • 3dc5ff5f65 remove useless memset Marc Stern 2023-08-11 16:44:18 +02:00