Robert Paprocki d0a63aac03

Define m_secmarker_skipped as an integer type ...

There's no reason to treat this this as a double, since it
represents a human-readable data value that is only meaningful
as an integer. In doing so we write cleaner audit logs and save
a small amount of space.

2018-04-24 11:49:13 -03:00

..

action-allow.json

Improve action-allow test titles

2017-08-20 20:00:28 -03:00

action-block.json

Check for disruptive action on SecDefaultAction

2018-02-28 14:02:47 -03:00

action-ctl_request_body_access.json

Adds missing action-ctl_rule_remove_by_id.json

2016-10-31 13:19:34 -03:00

action-ctl_request_body_processor.json

XML Parser: removes unnecessary message from debug logs

2017-04-05 09:40:05 -03:00

action-ctl_rule_engine.json

Adds test case for the ctl:ruleEngine action

2017-07-27 22:10:58 -03:00

action-ctl_rule_remove_by_id.json

Adds support for ctl:ruleRemoveByTag action

2018-03-26 17:01:53 -03:00

action-ctl_rule_remove_by_tag.json

Adds support for ctl:ruleRemoveByTag action

2018-03-26 17:01:53 -03:00

action-ctl_rule_remove_target_by_id.json

fix: remove target by {id,tag} are now considering collections

2017-07-25 09:19:21 -03:00

action-ctl_rule_remove_target_by_tag.json

fix: remove target by {id,tag} are now considering collections

2017-07-25 09:19:21 -03:00

action-disruptive.json

Fix test case as consequence of the changes at #1514

2017-07-28 22:24:21 -03:00

action-exec.json

Makes lua optional

2017-11-06 00:44:54 -03:00

action-id.json

Using run time string on the operators

2018-02-20 13:40:00 -03:00

action-initcol.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

action-msg.json

setvar: needs review

2016-11-28 12:12:04 -03:00

action-setrsc.json

Adds support to setrsc action

2017-06-09 16:59:04 -03:00

action-setsid.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

action-setuid.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

action-skip.json

Using run time string on the operators

2018-02-20 13:40:00 -03:00

action-tag.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

action-tnf-base64.json

Fix utils::string::ssplit() to handle delimiter in the end of string

2018-04-22 11:37:30 -03:00

action-xmlns.json

Fix some improperly formatted test cases

2016-06-14 15:32:37 -03:00

actions.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

auditlog.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

collection-case-insensitive.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

collection-regular_expression_selection.json

Fix regular expression test case and updates the test list

2017-03-06 15:01:52 -03:00

collection-resource.json

Using shared var for variables names

2018-02-20 13:40:01 -03:00

collection-tx-with-macro.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

collection-tx.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

config-body_limits.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

config-calling_phases_by_name.json

Forces disruptive to be first-rule-only

2017-04-24 21:06:35 -03:00

config-include-bad.json

Using run time string on the operators

2018-02-20 13:40:00 -03:00

config-include.json

Adds verbose message when a resource is not found.

2017-05-02 13:39:37 -03:00

config-remove_by_id.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

config-remove_by_msg.json

Adds support for SecRuleRemoveByTag

2017-11-07 14:52:50 -03:00

config-remove_by_tag.json

Adds support for SecRuleRemoveByTag

2017-11-07 14:52:50 -03:00

config-response_type.json

Adds support to SecResponseBodyMimeTypesClear

2017-08-16 22:21:03 -03:00

config-secdefaultaction.json

Check for disruptive action on SecDefaultAction

2018-02-28 14:02:47 -03:00

config-secremoterules.json

Adds support for curl resource on the regression tests

2017-03-06 15:02:01 -03:00

config-update-target-by-id.json

Adds support to SecRuleUpdateTargetById

2017-07-04 13:13:13 -07:00

config-update-target-by-msg.json

Adds support for update target by message

2017-11-06 23:29:25 -03:00

config-update-target-by-tag.json

Adds test case to UpdateTargetByTag

2017-07-04 11:00:11 -07:00

config-xml_external_entity.json

Adds support to SecXMLExternalEntity

2016-05-18 17:02:15 -03:00

debug_log.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

directive-sec_rule_script.json

Adds missing SecRuleScript test case

2017-11-06 23:27:00 -03:00

issue-394.json

Refactoring on the audit logs implementation

2016-12-14 23:17:28 -03:00

issue-960.json

Update issue-960.json with 3rd test.

2015-11-23 10:08:21 -03:00

issue-1152.json

Fix pass action behaviour: now only ingore actions within the same rule

2016-07-01 11:01:51 -03:00

issue-1528.json

Using run time string on the operators

2018-02-20 13:40:00 -03:00

issue-1565.json

Adds test case for issue #1565

2017-10-11 23:19:20 -03:00

issue-1576.json

Adds test case for issue #1576

2017-11-13 22:32:55 -03:00

issue-1591.json

Support pipes inside quoted variable selection

2017-10-20 11:02:42 -03:00

issue-1743.json

Fix github_issue reference in regression test

2018-04-23 22:09:03 -03:00

misc-variable-under-quotes.json

Consideres under quote variable while loading the rules

2017-10-06 20:25:20 +00:00

misc.json

Refactoring on the operators parsers (2/2)

2017-03-06 15:01:50 -03:00

offset-variable.json

Revert "Treating ARGS_NAMES as an array instead of scalar"

2017-08-24 00:10:42 -03:00

operator-detectsqli.json

Adds capture action to detectSQLi

2018-03-09 12:58:00 -03:00

operator-detectxss.json

Fix broken @detectxss operator regression test

2018-04-23 22:11:00 -03:00

operator-fuzzyhash.json

Fix regression tests for fuzzyHash

2017-10-27 14:47:04 -03:00

operator-inpectFile.json

Adjust tests for @inspectFile operator

2018-03-22 23:06:42 -03:00

operator-ipMatchFromFile.json

Fix resource load on ip match from file

2018-02-22 21:23:20 -03:00

operator-rx.json

add a test for negated implicit @rx operator

2017-08-20 19:39:18 -03:00

operator-UnconditionalMatch.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

operator-validate-byte-range.json

adds a test for validateByteRange with bytes > 127

2017-08-20 20:07:54 -03:00

operator-verifycc.json

Adds capture action to verifyCC

2018-03-09 11:26:24 -03:00

operator-verifycpf.json

Adds capture action to verifyCPF

2018-03-08 19:05:31 -03:00

operator-verifyssn.json

Adds capture action to verifySSN

2018-03-09 09:42:05 -03:00

request-body-parser-json.json

Refactoring on the JSON parser

2017-11-10 17:26:23 -03:00

request-body-parser-multipart-crlf.json

Fix some improperly formatted test cases

2016-06-14 15:32:37 -03:00

request-body-parser-multipart.json

Better support for multipart

2016-06-10 09:40:08 -03:00

request-body-parser-xml-validade-dtd.json

Adds support to SecXMLExternalEntity

2016-05-18 17:02:15 -03:00

request-body-parser-xml.json

Adds support to SecXMLExternalEntity

2016-05-18 17:02:15 -03:00

sec_component_signature.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

secaction.json

Refactoring: Rule class

2016-11-28 13:07:25 -03:00

secmarker.json

Define m_secmarker_skipped as an integer type

2018-04-24 11:49:13 -03:00

secruleengine.json

Extends the direct access model to other collections

2017-03-06 15:02:00 -03:00

transformation-none.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

transformations.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-ARGS_COMBINED_SIZE.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-ARGS_GET_NAMES.json

Revert "Treating ARGS_NAMES as an array instead of scalar"

2017-08-24 00:10:42 -03:00

variable-ARGS_GET.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-ARGS_NAMES.json

Revert "Treating ARGS_NAMES as an array instead of scalar"

2017-08-24 00:10:42 -03:00

variable-ARGS_POST_NAMES.json

Revert "Treating ARGS_NAMES as an array instead of scalar"

2017-08-24 00:10:42 -03:00

variable-ARGS_POST.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-ARGS.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-AUTH_TYPE.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-DURATION.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-ENV.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-FILES_COMBINED_SIZE.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-FILES_NAMES.json

Adds offset regression tests and assorted fixes on var's offsets

2017-03-06 15:02:02 -03:00

variable-FILES_SIZES.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-FILES.json

Refactoring: Rule class

2016-11-28 13:07:25 -03:00

variable-FULL_REQUEST_LENGTH.json

dds support to CtlRequestBodyAccess

2016-10-28 09:48:10 -03:00

variable-FULL_REQUEST.json

Adds offset regression tests and assorted fixes on var's offsets

2017-03-06 15:02:02 -03:00

variable-GEO.json

Fix maxmind test case

2018-03-29 17:24:32 -03:00

variable-HIGHEST_SEVERITY.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-INBOUND_DATA_ERROR.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-MATCHED_VAR_NAME.json

Forces disruptive to be first-rule-only

2017-04-24 21:06:35 -03:00

variable-MATCHED_VAR.json

Forces disruptive to be first-rule-only

2017-04-24 21:06:35 -03:00

variable-MATCHED_VARS_NAMES.json

Forces disruptive to be first-rule-only

2017-04-24 21:06:35 -03:00

variable-MATCHED_VARS.json

Forces disruptive to be first-rule-only

2017-04-24 21:06:35 -03:00

variable-MODSEC_BUILD.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-MULTIPART_CRLF_LF_LINES.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-MULTIPART_FILENAME.json

Extends the direct access model to other collections

2017-03-06 15:02:00 -03:00

variable-MULTIPART_INVALID_HEADER_FOLDING.json

Better support for multipart

2016-06-10 09:40:08 -03:00

variable-MULTIPART_NAME.json

Extends the direct access model to other collections

2017-03-06 15:02:00 -03:00

variable-MULTIPART_STRICT_ERROR.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-MULTIPART_UNMATCHED_BOUNDARY.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-OUTBOUND_DATA_ERROR.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-PATH_INFO.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-QUERY_STRING.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-REMOTE_ADDR.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-REMOTE_HOST.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-REMOTE_PORT.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-REMOTE_USER.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-REQBODY_PROCESSOR_ERROR.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-REQBODY_PROCESSOR.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-REQUEST_BASENAME.json

Removes slash from REQUEST_BASENAME

2016-11-22 15:33:32 -03:00

variable-REQUEST_BODY_LENGTH.json

dds support to CtlRequestBodyAccess

2016-10-28 09:48:10 -03:00

variable-REQUEST_BODY.json

dds support to CtlRequestBodyAccess

2016-10-28 09:48:10 -03:00

variable-REQUEST_COOKIES_NAMES.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-REQUEST_COOKIES.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-REQUEST_FILENAME.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-REQUEST_HEADERS_NAMES.json

Revert "Treating ARGS_NAMES as an array instead of scalar"

2017-08-24 00:10:42 -03:00

variable-REQUEST_HEADERS.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-REQUEST_LINE.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-REQUEST_METHOD.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-REQUEST_PROTOCOL.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-REQUEST_URI_RAW.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-REQUEST_URI.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-RESPONSE_BODY.json

Extend RESPONSE_BODY test case.

2017-08-20 20:00:07 -03:00

variable-RESPONSE_CONTENT_LENGTH.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-RESPONSE_CONTENT_TYPE.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-RESPONSE_HEADERS_NAMES.json

Revert "Treating ARGS_NAMES as an array instead of scalar"

2017-08-24 00:10:42 -03:00

variable-RESPONSE_HEADERS.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-RESPONSE_PROTOCOL.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-RULE.json

Avoids string copy by working with pointers while resolving variables

2016-12-28 20:00:14 -03:00

variable-SERVER_ADDR.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-SERVER_NAME.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-SERVER_PORT.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-SESSIONID.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-STATUS.json

SecLang uses RESPONSE_STATUS as variable, not STATUS

2016-10-18 21:30:06 -03:00

variable-TIME_DAY.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-TIME_EPOCH.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-TIME_HOUR.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-TIME_MIN.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-TIME_MON.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-TIME_SEC.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-TIME_WDAY.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-TIME_YEAR.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-TIME.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-TX.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-UNIQUE_ID.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-URLENCODED_ERROR.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-USERID.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-variation-count.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-variation-exclusion.json

Removes SecDebugLog directive from the test cases

2016-10-18 18:23:35 -03:00

variable-WEBAPPID.json

Adds support to WEBAPPID variable

2017-11-08 10:28:56 -03:00

variable-WEBSERVER_ERROR_LOG.json

Adds a test case for WEBSERVER_ERROR_LOG

2016-07-08 11:05:09 -03:00