Felipe Zimmerle b5398abaf2 Forces downloads using https-only for resources or rules ...

This commit makes ModSecurity to refuse to download or install rules
(SecRemoteRules) from sites that are not running HTTPS with a valid and
trusted certificate.

2014-11-14 11:53:40 -08:00

..

libinjection

Updates the libinjection

2014-03-31 16:22:11 -07:00

acmp.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

acmp.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

apache2_config.c

Forces downloads using https-only for resources or rules

2014-11-14 11:53:40 -08:00

apache2_io.c

Change strncpy to memcpy

2013-07-05 02:45:05 -07:00

apache2_util.c

Removed SecDefineRemoteAddr and fixed Apache 2.4 mod_remoteip integration

2013-05-06 00:49:07 -04:00

apache2.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

Makefile.am

Initial support to load rules from a remote server

2014-11-14 11:53:40 -08:00

Makefile.win

Initial support to load rules from a remote server

2014-11-14 11:53:40 -08:00

mod_security2_config.hw

Updates to build on Windows with MS VC++ 8.

2008-02-13 07:10:54 +00:00

mod_security2.c

Adds SecRemoteRules as an build option

2014-11-14 11:53:40 -08:00

modsecurity_config.h

IIS version improvements

2013-01-18 11:39:05 -08:00

modsecurity.c

Initial support to load rules from a remote server

2014-11-14 11:53:40 -08:00

modsecurity.h

Adds SecRemoteRules as an build option

2014-11-14 11:53:40 -08:00

modules.mk

Added support for JSON body processor

2014-03-31 16:22:09 -07:00

msc_crypt.c

Code cosmetics: Reduces the amounts of warning.

2014-03-31 16:22:11 -07:00

msc_crypt.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_geo.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_geo.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_gsb.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_gsb.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_json.c

Changes JSON parser to not accept parcial contents

2014-03-31 16:22:10 -07:00

msc_json.h

Code cosmetics: Reduces the amounts of warning.

2014-03-31 16:22:11 -07:00

msc_logging.c

Adds verification before access the strcmp

2014-03-31 16:22:09 -07:00

msc_logging.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_lua.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_lua.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_multipart.c

Uses %zu to print size_t instead of %d.

2014-03-31 16:22:11 -07:00

msc_multipart.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_parsers.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_parsers.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_pcre.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_pcre.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_release.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_release.h

Version 2.8.0

2014-04-14 10:12:03 -07:00

msc_remote_rules.c

Forces downloads using https-only for resources or rules

2014-11-14 11:53:40 -08:00

msc_remote_rules.h

Adds the `crypto' option to SecRemoteRules directive

2014-11-14 11:53:40 -08:00

msc_reqbody.c

Makes the build system to look for yajl using a macro file

2014-03-31 16:22:09 -07:00

msc_status_engine.c

Using real server signature on status call

2014-11-14 11:53:39 -08:00

msc_status_engine.h

Optimization on the status engine call

2014-03-31 16:22:05 -07:00

msc_tree.c

Fixes subnets representations using slash notation

2014-06-11 09:31:53 -07:00

msc_tree.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_unicode.c

Fix logical disjunction and conjunction issues

2013-08-12 18:43:56 -03:00

msc_unicode.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_util.c

Forces downloads using https-only for resources or rules

2014-11-14 11:53:40 -08:00

msc_util.h

Initial support to load rules from a remote server

2014-11-14 11:53:40 -08:00

msc_xml.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

msc_xml.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

persist_dbm.c

Added: SDBM_DELETE_ERROR variable

2013-05-02 08:04:26 -04:00

persist_dbm.h

Updated copyright dates

2013-04-19 03:20:46 -04:00

re_actions.c

Flip allocations that happen during initialization (typically) over to use non-global apr memory pools.

2014-03-03 08:00:53 -08:00

re_operators.c

Forces downloads using https-only for resources or rules

2014-11-14 11:53:40 -08:00

re_tfns.c

Updated copyright dates

2013-04-19 03:20:46 -04:00

re_variables.c

Declares msre_var *rvar at the beggining of the function

2014-11-14 11:53:39 -08:00

re.c

Flip allocations that happen during initialization (typically) over to use non-global apr memory pools.

2014-03-03 08:00:53 -08:00

re.h

Adds fuzzyHash operator

2014-11-14 11:53:39 -08:00

utf8tables.h

Updated copyright dates

2013-04-19 03:20:46 -04:00