[ { "enabled":1, "version_min":300000, "title":"Testing Variables :: MULTIPART_STRICT_ERROR", "client":{ "ip":"200.249.12.31", "port":123 }, "server":{ "ip":"200.249.12.31", "port":80 }, "request":{ "headers":{ "Host":"localhost", "User-Agent":"curl/7.38.0", "Accept":"*/*", "Content-Length":"330", "Content-Type":"multipart/form-data; boundary= --------------------------756b6d74fa1a8ee2", "Expect":"100-continue" }, "uri":"/", "protocol":"POST", "body":[ "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"name\"", "", "test", "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"filedata\"; filename=\"small_text_file.txt\"", "Content-Type: text/plain", "", "This is a very small test file..", "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"filedata\"; filename=\"small_text_file.txt\"", "Content-Type: text/plain", "", "This is another very small test file..", "--------------------------756b6d74fa1a8ee2--" ] }, "response":{ "headers":{ "Date":"Mon, 13 Jul 2015 20:02:41 GMT", "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", "Content-Type":"text/html" }, "body":[ "no need." ] }, "expected":{ "debug_log":"Multipart: Boundary starts with white space, setting MULTIPART_STRICT_ERROR to 1" }, "rules":[ "SecRuleEngine On", "SecDebugLog \/tmp\/modsec_debug.log", "SecDebugLogLevel 9", "SecRule MULTIPART_STRICT_ERROR \"@contains 0\" \"id:1,phase:3,pass,t:trim\"" ] }, { "enabled":1, "version_min":300000, "title":"Testing Variables :: MULTIPART_STRICT_ERROR", "client":{ "ip":"200.249.12.31", "port":123 }, "server":{ "ip":"200.249.12.31", "port":80 }, "request":{ "headers":{ "Host":"localhost", "User-Agent":"curl/7.38.0", "Accept":"*/*", "Content-Length":"330", "Content-Type":"multipart/form-data; boundary=\"--------------------------756b6d74fa1a8ee2\"", "Expect":"100-continue" }, "uri":"/", "protocol":"POST", "body":[ "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"name\"", "", "test", "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"filedata\"; filename=\"small_text_file.txt\"", "Content-Type: text/plain", "", "This is a very small test file..", "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"filedata\"; filename=\"small_text_file.txt\"", "Content-Type: text/plain", "", "This is another very small test file..", "--------------------------756b6d74fa1a8ee2--" ] }, "response":{ "headers":{ "Date":"Mon, 13 Jul 2015 20:02:41 GMT", "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", "Content-Type":"text/html" }, "body":[ "no need." ] }, "expected":{ "debug_log":"Multipart: Boundary is quoted, setting MULTIPART_STRICT_ERROR to 1" }, "rules":[ "SecRuleEngine On", "SecDebugLog \/tmp\/modsec_debug.log", "SecDebugLogLevel 9", "SecRule MULTIPART_STRICT_ERROR \"@contains 0\" \"id:1,phase:3,pass,t:trim\"" ] }, { "enabled":1, "version_min":300000, "title":"Testing Variables :: MULTIPART_STRICT_ERROR", "client":{ "ip":"200.249.12.31", "port":123 }, "server":{ "ip":"200.249.12.31", "port":80 }, "request":{ "headers":{ "Host":"localhost", "User-Agent":"curl/7.38.0", "Accept":"*/*", "Content-Length":"330", "Content-Type":"multipart/form-data; boundary=--------------------------756b6d74fa1a8ee2", "Expect":"100-continue" }, "uri":"/", "protocol":"POST", "body":[ "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"name\"", "", "test", "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"filedata\"; filename=\"small_text_file.txt\"", "Content-Type: text/plain", "", "This is a very small test file..", "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"filedata\"; filename=\"small_text_file.txt\"", "Content-Type: text/plain", "", "This is another very small test file..", "--------------------------756b6d74fa1a8ee2--whee." ] }, "response":{ "headers":{ "Date":"Mon, 13 Jul 2015 20:02:41 GMT", "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", "Content-Type":"text/html" }, "body":[ "no need." ] }, "expected":{ "debug_log":"Multipart: There is data after the boundary, setting MULTIPART_STRICT_ERROR to 1" }, "rules":[ "SecRuleEngine On", "SecDebugLog \/tmp\/modsec_debug.log", "SecDebugLogLevel 9", "SecRule MULTIPART_STRICT_ERROR \"@contains 0\" \"id:1,phase:3,pass,t:trim\"" ] }, { "enabled":1, "version_min":300000, "title":"Testing Variables :: MULTIPART_STRICT_ERROR", "client":{ "ip":"200.249.12.31", "port":123 }, "server":{ "ip":"200.249.12.31", "port":80 }, "request":{ "headers":{ "Host":"localhost", "User-Agent":"curl/7.38.0", "Accept":"*/*", "Content-Length":"330", "Content-Type":"multipart/form-data; boundary=--------------------------756b6d74fa1a8ee2", "Expect":"100-continue" }, "uri":"/", "protocol":"POST", "body":[ "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"name\"", "", "test", "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"filedata\"; filename=\"small_text_file.txt\"", "Content-Type: text/plain", "", "This is a very small test file..", "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"filedata\"; filename=\"small_text_file.txt\"", "Content-Type: text/plain", "", "This is another very small test file..", "--------------------------756b6d74fa1a8ee2--" ] }, "response":{ "headers":{ "Date":"Mon, 13 Jul 2015 20:02:41 GMT", "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", "Content-Type":"text/html" }, "body":[ "no need." ] }, "expected":{ "debug_log":"Multipart: Lines are LF-terminated, setting MULTIPART_STRICT_ERROR to 1" }, "rules":[ "SecRuleEngine On", "SecDebugLog \/tmp\/modsec_debug.log", "SecDebugLogLevel 9", "SecRule MULTIPART_STRICT_ERROR \"@contains 0\" \"id:1,phase:3,pass,t:trim\"" ] }, { "enabled":1, "version_min":300000, "title":"Testing Variables :: MULTIPART_STRICT_ERROR", "client":{ "ip":"200.249.12.31", "port":123 }, "server":{ "ip":"200.249.12.31", "port":80 }, "request":{ "headers":{ "Host":"localhost", "User-Agent":"curl/7.38.0", "Accept":"*/*", "Content-Length":"330", "Content-Type":"multipart/form-data; boundary=--------------------------756b6d74fa1a8ee2", "Expect":"100-continue" }, "uri":"/", "protocol":"POST", "body":[ "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"name\"", "", "test", "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"filedata\"; filename=\"small_text_file.txt\"", "Content-Type: text/plain", "", "This is a very small test file..", "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"filedata\"; filename=\"small_text_file.txt\"", "Content-Type: text/plain", "", "This is another very small test file..", "--------------------------756b6d74fa1a8ee2--" ] }, "response":{ "headers":{ "Date":"Mon, 13 Jul 2015 20:02:41 GMT", "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", "Content-Type":"text/html" }, "body":[ "no need." ] }, "expected":{ "debug_log":"Boundary missing semicolon, setting MULTIPART_STRICT_ERROR to 1" }, "rules":[ "SecRuleEngine On", "SecDebugLog \/tmp\/modsec_debug.log", "SecDebugLogLevel 9", "SecRule MULTIPART_STRICT_ERROR \"@contains 0\" \"id:1,phase:3,pass,t:trim\"" ] }, { "enabled":1, "version_min":300000, "title":"Testing Variables :: MULTIPART_STRICT_ERROR", "client":{ "ip":"200.249.12.31", "port":123 }, "server":{ "ip":"200.249.12.31", "port":80 }, "request":{ "headers":{ "Host":"localhost", "User-Agent":"curl/7.38.0", "Accept":"*/*", "Content-Length":"330", "Content-Type":"multipart/form-data; boundary=--------------------------756b6d74fa1a8ee2", "Expect":"100-continue" }, "uri":"/", "protocol":"POST", "body":[ "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"name\"", "", "test", "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name='filedata'; filename=\"small_text_file.txt\"", "Content-Type: text/plain", "", "This is a very small test file..", "--------------------------756b6d74fa1a8ee2", "Content-Disposition: form-data; name=\"filedata\"; filename=\"small_text_file.txt\"", "Content-Type: text/plain", "", "This is another very small test file..", "--------------------------756b6d74fa1a8ee2--" ] }, "response":{ "headers":{ "Date":"Mon, 13 Jul 2015 20:02:41 GMT", "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", "Content-Type":"text/html" }, "body":[ "no need." ] }, "expected":{ "debug_log":"Multipart: Invalid quote, setting MULTIPART_STRICT_ERROR to 1" }, "rules":[ "SecRuleEngine On", "SecDebugLog \/tmp\/modsec_debug.log", "SecDebugLogLevel 9", "SecRule MULTIPART_STRICT_ERROR \"@contains 0\" \"id:1,phase:3,pass,t:trim\"" ] } ]