ModSecurity/test/test-cases/regression/issue-2423-msg-in-chain.json

[
  {
    "enabled":1,
    "version_min":300000,
    "title":"Test match variable (1/n)",
    "github_issue": 2423,
    "expected":{
        "http_code": 437,
        "error_log": "against variable `REQUEST_HEADERS:Transfer-Encoding' .Value: `deflate'"
    },
    "client":{
      "ip":"200.249.12.31",
      "port":123
    },
    "request":{
      "headers":{
        "Host":"localhost",
        "Transfer-Encoding": "deflate"
      },
      "uri":"/match-this",
      "method":"GET"
    },
    "server":{
      "ip":"200.249.12.31",
      "port":80
    },
    "rules":[
      "SecRuleEngine On",
      "SecRule REQUEST_URI \"^.*$\" \"phase:2,deny,capture,id:1,msg:'MatchedVar On Msg: [%{MATCHED_VAR}]',logdata:'MatchedVar On LogData %{MATCHED_VAR}',chain\"",
      "SecRule REQUEST_HEADERS \"^.*$\" \"status:437\""
    ]
  },
  {
    "enabled":1,
    "version_min":300000,
    "title":"Test match variable (2/n)",
    "github_issue": 2423,
    "expected":{
        "http_code": 437,
        "error_log": "MatchedVar On Msg: .deflate."
    },
    "client":{
      "ip":"200.249.12.31",
      "port":123
    },
    "request":{
      "headers":{
        "Host":"localhost",
        "Transfer-Encoding": "deflate"
      },
      "uri":"/match-this",
      "method":"GET"
    },
    "server":{
      "ip":"200.249.12.31",
      "port":80
    },
    "rules":[
      "SecRuleEngine On",
      "SecRule REQUEST_URI \"^.*$\" \"phase:2,deny,capture,id:1,msg:'MatchedVar On Msg: [%{MATCHED_VAR}]',logdata:'MatchedVar On LogData %{MATCHED_VAR}',chain\"",
      "SecRule REQUEST_HEADERS \"^.*$\" \"status:437\""
    ]
  },
  {
    "enabled":1,
    "version_min":300000,
    "title":"Test match variable (3/n)",
    "github_issue": 2423,
    "expected":{
        "http_code": 437,
        "error_log": "MatchedVar On LogData: deflate"
    },
    "client":{
      "ip":"200.249.12.31",
      "port":123
    },
    "request":{
      "headers":{
        "Host":"localhost",
        "Transfer-Encoding": "deflate"
      },
      "uri":"/match-this",
      "method":"GET"
    },
    "server":{
      "ip":"200.249.12.31",
      "port":80
    },
    "rules":[
      "SecRuleEngine On",
      "SecRule REQUEST_URI \"^.*$\" \"phase:2,deny,capture,id:1,msg:'MatchedVar On Msg: [%{MATCHED_VAR}]',logdata:'MatchedVar On LogData: %{MATCHED_VAR}',chain\"",
      "SecRule REQUEST_HEADERS \"^.*$\" \"status:437\""
    ]
  },
  {
    "enabled":1,
    "version_min":300000,
    "title":"Test match variable (4/n)",
    "github_issue": 2423,
    "expected":{
        "http_code": 437,
        "error_log": "msg \"Illegal header \\[/restricted/\\]\""
    },
    "client":{
      "ip":"200.249.12.31",
      "port":123
    },
    "request":{
      "headers":{
        "Host":"localhost",
        "Restricted":"attack",
	      "Other": "Value"
      },
      "uri":"/",
      "method":"GET"
    },
    "server":{
      "ip":"200.249.12.31",
      "port":80
    },
    "rules":[
      "SecRuleEngine On",
      "SecRule REQUEST_HEADERS_NAMES \"^.*$\" \"phase:2,setvar:'tx.header_name_%{TX.0}=/%{TX.0}/',deny,t:lowercase,capture,id:500065,msg:'Illegal header [%{MATCHED_VAR}]',logdata:'Restricted header detected: %{MATCHED_VAR}',chain\"",
      "SecRule TX:/^header_name_/ \"@within /name1/restricted/name3/\" \"status:437\""
    ]
  }
]