[ { "enabled":1, "version_min":300000, "title":"Testing Variables :: REQUEST_COOKIES (1/3)", "client":{ "ip":"200.249.12.31", "port":123 }, "server":{ "ip":"200.249.12.31", "port":80 }, "request":{ "headers":{ "Host":"localhost", "User-Agent":"curl/7.38.0", "Accept":"*/*", "Cookie":"USER_TOKEN=Yes; a=z; t=b" }, "uri":"/?key=value&key=other_value", "protocol":"GET" }, "response":{ "headers":{ "Date":"Mon, 13 Jul 2015 20:02:41 GMT", "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", "Content-Type":"text/html" }, "body":[ "no need." ] }, "expected":{ "debug_log":"Target value: \"Yes\" \\(Variable: REQUEST_COOKIES:USER_TOKEN\\)" }, "rules":[ "SecRuleEngine On", "SecDebugLog \/tmp\/modsec_debug.log", "SecDebugLogLevel 9", "SecRule REQUEST_COOKIES \"@contains test \" \"id:1,pass,t:trim\"" ] }, { "enabled":1, "version_min":300000, "title":"Testing Variables :: REQUEST_COOKIES (2/3)", "client":{ "ip":"200.249.12.31", "port":123 }, "server":{ "ip":"200.249.12.31", "port":80 }, "request":{ "headers":{ "Host":"localhost", "User-Agent":"curl/7.38.0", "Accept":"*/*", "Cookie":"USER_TOKEN=Yes; a=z; t=b" }, "uri":"/?key=value&key=other_value", "protocol":"GET" }, "response":{ "headers":{ "Date":"Mon, 13 Jul 2015 20:02:41 GMT", "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", "Content-Type":"text/html" }, "body":[ "no need." ] }, "expected":{ "debug_log":"Target value: \"z\" \\(Variable: REQUEST_COOKIES:a\\)" }, "rules":[ "SecRuleEngine On", "SecDebugLog \/tmp\/modsec_debug.log", "SecDebugLogLevel 9", "SecRule REQUEST_COOKIES \"@contains test \" \"id:1,pass,t:trim\"" ] }, { "enabled":1, "version_min":300000, "title":"Testing Variables :: REQUEST_COOKIES (3/3)", "client":{ "ip":"200.249.12.31", "port":123 }, "server":{ "ip":"200.249.12.31", "port":80 }, "request":{ "headers":{ "Host":"localhost", "User-Agent":"curl/7.38.0", "Accept":"*/*", "Cookie":"USER_TOKEN=Yes; a=z; t=b" }, "uri":"/?key=value&key=other_value", "protocol":"GET" }, "response":{ "headers":{ "Date":"Mon, 13 Jul 2015 20:02:41 GMT", "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", "Content-Type":"text/html" }, "body":[ "no need." ] }, "expected":{ "debug_log":"Target value: \"b\" \\(Variable: REQUEST_COOKIES:t\\)" }, "rules":[ "SecRuleEngine On", "SecDebugLog \/tmp\/modsec_debug.log", "SecDebugLogLevel 9", "SecRule REQUEST_COOKIES \"@contains test \" \"id:1,pass,t:trim\"" ] } ]