Allan Boll 2ae357be88

Let body parsers observe SecRequestBodyNoFilesLimit ...

Previously, modsecurity_request_body_store would keep feeding the body parsers (JSON/XML/Multipart) even after the SecRequestBodyNoFilesLimit limit was met. This change prevents this. Also, modsecurity_request_body_end now returns an error code when the limit is met, so that a message can be logged for this event.

2018-09-05 16:08:21 -03:00

..

libinjection

Updates libinjection to v3.10.0

2017-05-31 21:06:33 -03:00

acmp.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

acmp.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

apache2_config.c

Added ALLOW_ID_NOT_UNIQUE compile flag to allow duplicate rule ids and no id

2016-11-21 09:58:40 -03:00

apache2_io.c

Let body parsers observe SecRequestBodyNoFilesLimit

2018-09-05 16:08:21 -03:00

apache2_util.c

{dis|en}able-filename-logging: Option to disable logging of filename in audit log [Issue #1065 - Marc Stern]

2017-04-07 10:55:08 -03:00

apache2.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

Makefile.am

Initial support to load rules from a remote server

2014-11-14 11:53:40 -08:00

Makefile.win

IIS: Creates IIS_VERSION definition

2014-12-11 14:47:59 -08:00

mod_security2_config.hw

Updates to build on Windows with MS VC++ 8.

2008-02-13 07:10:54 +00:00

mod_security2.c

Fixes SecConnWriteStateLimit

2017-10-05 14:38:42 +00:00

modsecurity_config.h

IIS version improvements

2013-01-18 11:39:05 -08:00

modsecurity.c

Makes global mutex for collections optional

2017-05-21 08:53:11 -03:00

modsecurity.h

Makes `large stream optimization' optional

2017-10-06 16:43:45 +00:00

modules.mk

Added support for JSON body processor

2014-03-31 16:22:09 -07:00

msc_crypt.c

Make url path absolute for SecHashEngine only when it is relative in the first place. Fix #752

2017-05-22 18:56:37 -03:00

msc_crypt.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_geo.c

As of 17 May 2016, the country name "Czechia" replaces this MemberState's former short name of Czech Republic (code 203)

2016-12-01 15:07:46 -03:00

msc_geo.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_gsb.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_gsb.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_json.c

Enables sanitizing of json request bodies in the apache module for native log format

2018-02-05 09:36:45 -03:00

msc_json.h

Code cosmetics: Reduces the amounts of warning.

2014-03-31 16:22:11 -07:00

msc_logging_json.h

first pass at JSON logging implementation

2016-01-29 11:59:52 -03:00

msc_logging.c

Enables sanitizing of json request bodies in the apache module for native log format

2018-02-05 09:36:45 -03:00

msc_logging.h

Do not compile in JSON logging support if yajl is not found

2016-01-29 11:59:52 -03:00

msc_lua.c

Extends Lua implementation to support Lua 5.3

2016-01-08 18:39:29 -03:00

msc_lua.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_multipart.c

Cosmetics: moving declaration to the too of the block

2017-07-14 13:47:30 -03:00

msc_multipart.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_parsers.c

potential off by one in parse_arguments

2018-09-05 15:33:39 -03:00

msc_parsers.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_pcre.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_pcre.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_release.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_release.h

Version 2.9.2

2017-07-18 09:59:59 -07:00

msc_remote_rules.c

Uses our own version of ap_find_command

2015-02-12 09:34:42 -08:00

msc_remote_rules.h

Makes Curl no longer a mandatory depedency for ModSecurity core

2014-12-03 08:28:59 -08:00

msc_reqbody.c

Let body parsers observe SecRequestBodyNoFilesLimit

2018-09-05 16:08:21 -03:00

msc_status_engine.c

Few missing headers, in the <arpa/inet.h> inclusions ones mainly due to the fact APR_HAVE* constants are simply into apr.h

2017-09-29 14:00:32 +00:00

msc_status_engine.h

Reducing the amount of compilation warnings

2014-12-11 12:42:58 -08:00

msc_tree.c

Fix ip tree lookup on netmask content

2018-06-07 14:48:18 -03:00

msc_tree.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_unicode.c

Fix logical disjunction and conjunction issues

2013-08-12 18:43:56 -03:00

msc_unicode.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_util.c

Few missing headers, in the <arpa/inet.h> inclusions ones mainly due to the fact APR_HAVE* constants are simply into apr.h

2017-09-29 14:00:32 +00:00

msc_util.h

Reducing the amount of compilation warnings

2014-12-11 12:42:58 -08:00

msc_xml.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_xml.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

persist_dbm.c

Makes global mutex for collections optional

2017-05-21 08:53:11 -03:00

persist_dbm.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

re_actions.c

Adds a sanity check before use ctl:ruleRemoveTargetByTag

2017-05-22 09:23:58 -03:00

re_operators.c

Fix utf-8 character encoding conversion

2018-09-04 21:02:09 -03:00

re_tfns.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

re_variables.c

Initialize msre_var pointers

2017-06-23 16:16:23 -03:00

re.c

Avoid additional operator invokation if last transform of a multimatch doesn't modify the input

2017-05-22 15:13:54 -03:00

re.h

Read fuzzy hash databases on init

2017-04-06 13:20:24 -03:00

utf8tables.h

Updated copyright dates

2013-04-19 03:20:46 -04:00