florian-eichelberger fc83a5d0f0

Enables sanitizing of json request bodies in the apache module for native log format

2017-05-30 22:05:16 -03:00

..

libinjection

Updates libinjection.

2017-05-30 10:48:11 -03:00

acmp.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

acmp.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

apache2_config.c

Added ALLOW_ID_NOT_UNIQUE compile flag to allow duplicate rule ids and no id

2016-11-21 09:58:40 -03:00

apache2_io.c

This is fix for reborn of https://github.com/SpiderLabs/ModSecurity/issues/334 This bug has been reborn, because Apache (at least in RedHat/CentOS) since version 2.2.15-47 returns in same case APR_INCOMPLETE (not APR_EOF). Based on same patch I have added handler for APR_INCOMPLETE.

2016-03-16 10:35:22 -03:00

apache2_util.c

{dis|en}able-filename-logging: Option to disable logging of filename in audit log [Issue #1065 - Marc Stern]

2017-04-07 10:55:08 -03:00

apache2.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

Makefile.am

Initial support to load rules from a remote server

2014-11-14 11:53:40 -08:00

Makefile.win

IIS: Creates IIS_VERSION definition

2014-12-11 14:47:59 -08:00

mod_security2_config.hw

Updates to build on Windows with MS VC++ 8.

2008-02-13 07:10:54 +00:00

mod_security2.c

Fixes issue #1432 by not logging normal behavior to error.log and using APLOG_DEBUG instead

2017-05-30 08:13:11 -03:00

modsecurity_config.h

IIS version improvements

2013-01-18 11:39:05 -08:00

modsecurity.c

Makes global mutex for collections optional

2017-05-21 08:53:11 -03:00

modsecurity.h

Makes global mutex for collections optional

2017-05-21 08:53:11 -03:00

modules.mk

Added support for JSON body processor

2014-03-31 16:22:09 -07:00

msc_crypt.c

Make url path absolute for SecHashEngine only when it is relative in the first place. Fix #752

2017-05-22 18:56:37 -03:00

msc_crypt.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_geo.c

As of 17 May 2016, the country name "Czechia" replaces this MemberState's former short name of Czech Republic (code 203)

2016-12-01 15:07:46 -03:00

msc_geo.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_gsb.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_gsb.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_json.c

Enables sanitizing of json request bodies in the apache module for native log format

2017-05-30 22:05:16 -03:00

msc_json.h

Code cosmetics: Reduces the amounts of warning.

2014-03-31 16:22:11 -07:00

msc_logging_json.h

first pass at JSON logging implementation

2016-01-29 11:59:52 -03:00

msc_logging.c

Enables sanitizing of json request bodies in the apache module for native log format

2017-05-30 22:05:16 -03:00

msc_logging.h

Do not compile in JSON logging support if yajl is not found

2016-01-29 11:59:52 -03:00

msc_lua.c

Extends Lua implementation to support Lua 5.3

2016-01-08 18:39:29 -03:00

msc_lua.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_multipart.c

Don't unnecessarily rename request body parts in cleanup

2016-10-10 10:06:38 -03:00

msc_multipart.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_parsers.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_parsers.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_pcre.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_pcre.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_release.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_release.h

Version 2.9.1 (final)

2016-03-09 14:48:29 -03:00

msc_remote_rules.c

Uses our own version of ap_find_command

2015-02-12 09:34:42 -08:00

msc_remote_rules.h

Makes Curl no longer a mandatory depedency for ModSecurity core

2014-12-03 08:28:59 -08:00

msc_reqbody.c

Don't unnecessarily rename request body parts in cleanup

2016-10-10 10:06:38 -03:00

msc_status_engine.c

Improves the accuracy of version identification on status calls

2015-02-11 18:37:01 -08:00

msc_status_engine.h

Reducing the amount of compilation warnings

2014-12-11 12:42:58 -08:00

msc_tree.c

Fixes subnets representations using slash notation

2014-06-11 09:31:53 -07:00

msc_tree.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_unicode.c

Fix logical disjunction and conjunction issues

2013-08-12 18:43:56 -03:00

msc_unicode.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_util.c

Makes Curl no longer a mandatory depedency for ModSecurity core

2014-12-03 08:28:59 -08:00

msc_util.h

Reducing the amount of compilation warnings

2014-12-11 12:42:58 -08:00

msc_xml.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_xml.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

persist_dbm.c

Makes global mutex for collections optional

2017-05-21 08:53:11 -03:00

persist_dbm.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

re_actions.c

Adds a sanity check before use ctl:ruleRemoveTargetByTag

2017-05-22 09:23:58 -03:00

re_operators.c

Read fuzzy hash databases on init

2017-04-06 13:20:24 -03:00

re_tfns.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

re_variables.c

Fix the variable resolution duration (Issue #662)

2015-10-27 14:40:01 -03:00

re.c

Avoid additional operator invokation if last transform of a multimatch doesn't modify the input

2017-05-22 15:13:54 -03:00

re.h

Read fuzzy hash databases on init

2017-04-06 13:20:24 -03:00

utf8tables.h

Updated copyright dates

2013-04-19 03:20:46 -04:00