Felipe Zimmerle a15f8813e9 Honor the SecRuleEngine while filtering connections ...

The SecRuleEngine has the capability to Enable, Disable or even to place the
ModSecurity in DetectionOnly mode. The SecReadStateLimit and SecWriteStateLimit
were not honoring such state, due the fact that our configuration belongs to
requests not to connections, the only struct that exists while those filters
are placed. By adding a global variable "conn_limits_filter_state" we are now
able to identify the current state of the ModSecurity, once the configuration
is loaded this variable is set and used by the connections filters.

2014-03-31 16:22:10 -07:00

..

libinjection

libinjection sync

2013-12-18 04:19:02 +00:00

acmp.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

acmp.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

apache2_config.c

Honor the SecRuleEngine while filtering connections

2014-03-31 16:22:10 -07:00

apache2_io.c

Change strncpy to memcpy

2013-07-05 02:45:05 -07:00

apache2_util.c

Removed SecDefineRemoteAddr and fixed Apache 2.4 mod_remoteip integration

2013-05-06 00:49:07 -04:00

apache2.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

Makefile.am

Makes the build system to look for yajl using a macro file

2014-03-31 16:22:09 -07:00

Makefile.win

Adds JSON support on ISS port

2014-03-31 16:22:09 -07:00

mod_security2_config.hw

Updates to build on Windows with MS VC++ 8.

2008-02-13 07:10:54 +00:00

mod_security2.c

Honor the SecRuleEngine while filtering connections

2014-03-31 16:22:10 -07:00

modsecurity_config.h

IIS version improvements

2013-01-18 11:39:05 -08:00

modsecurity.c

Makes the build system to look for yajl using a macro file

2014-03-31 16:22:09 -07:00

modsecurity.h

Honor the SecRuleEngine while filtering connections

2014-03-31 16:22:10 -07:00

modules.mk

Added support for JSON body processor

2014-03-31 16:22:09 -07:00

msc_crypt.c

Fix crash when use SessionID as paramenter in SecHashKey

2013-07-17 08:51:31 -07:00

msc_crypt.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_geo.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_geo.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_gsb.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_gsb.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_json.c

Changes JSON parser to not accept parcial contents

2014-03-31 16:22:10 -07:00

msc_json.h

Makes the build system to look for yajl using a macro file

2014-03-31 16:22:09 -07:00

msc_logging.c

Adds verification before access the strcmp

2014-03-31 16:22:09 -07:00

msc_logging.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_lua.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_lua.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_multipart.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_multipart.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_parsers.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_parsers.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_pcre.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_pcre.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_release.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_release.h

Changes release version to 2.7.7

2013-12-18 03:46:36 -08:00

msc_reqbody.c

Makes the build system to look for yajl using a macro file

2014-03-31 16:22:09 -07:00

msc_status_engine.c

Optimization on the status engine call

2014-03-31 16:22:05 -07:00

msc_status_engine.h

Optimization on the status engine call

2014-03-31 16:22:05 -07:00

msc_tree.c

Adds support to suspicious and whitelist to Read and Write limits

2014-03-31 16:22:10 -07:00

msc_tree.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_unicode.c

Fix logical disjunction and conjunction issues

2013-08-12 18:43:56 -03:00

msc_unicode.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_util.c

Using RadixTree instead of list to storage IPs

2014-03-31 16:22:10 -07:00

msc_util.h

Using RadixTree instead of list to storage IPs

2014-03-31 16:22:10 -07:00

msc_xml.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_xml.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

persist_dbm.c

Added: SDBM_DELETE_ERROR variable

2013-05-02 08:04:26 -04:00

persist_dbm.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

re_actions.c

Flip allocations that happen during initialization (typically) over to use non-global apr memory pools.

2014-03-03 08:00:53 -08:00

re_operators.c

Using RadixTree instead of list to storage IPs

2014-03-31 16:22:10 -07:00

re_tfns.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

re_variables.c

Adds REQUEST_FULL and REQUEST_FULL_LENGTH variables

2014-03-31 07:14:55 -07:00

re.c

Flip allocations that happen during initialization (typically) over to use non-global apr memory pools.

2014-03-03 08:00:53 -08:00

re.h

Using RadixTree instead of list to storage IPs

2014-03-31 16:22:10 -07:00

utf8tables.h

Updated copyright dates

2013-04-19 03:20:46 -04:00