ModSecurity

mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-13 21:36:00 +03:00

History

SecLang uses RESPONSE_STATUS as variable, not STATUS

Seclang uses RESPONSE_STATUS as variable to encode the status code for the
request.
https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#RESPONSE_STATUS

The CRS v3.0.0-dev rules, for instance, uses the RESPONSE_STATUS variable.
https://github.com/SpiderLabs/owasp-modsecurity-crs/blob/v3.0.0-dev/rules/RESPONSE-50-DATA-LEAKAGES-IIS.conf

When processing response headers, the variable was named STATUS when creating/storing
it in the collection. Fix it, and update regression testcases.

2016-10-18 21:30:06 -03:00

benchmark

Refactoring on rulesProperties class

2016-10-05 12:01:15 -03:00

common

Cosmetics: Fix coding style

2016-07-12 21:59:17 -03:00

fuzzer

Fix some issues reported by the static analysis

2016-03-18 19:37:51 -03:00

optimization

refactoring: Moves Phases enum to outside ModSecurity class