mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-08-14 05:45:59 +03:00
The problem was caused by the fact that ModSecutiry was telling Nginx that headers had been sent when, in fact, had not. This modification was added in the past, along with others, in the following commit: fd2c30fa2311e783eecf3bf02bf3dcfbabc3968a This patch, just removes the "r->header_sent = 1". After that modification the following regression tests started to work again: from: action/00-disruptive-actions.t 3) action - pass in phase:3 4) action - pass in phase:4 11) action - deny in phase:3 12) action - deny in phase:4 19) action - redirect in phase:3 (get) 20) action - redirect in phase:4 (get) 23) action - proxy in phase:3 (get) 24) action - proxy in phase:4 (get) from: config/10-response-directives.t 2) config - SecResponseBodyAccess On 6) config - SecResponseBodyLimit (greater) 7) config - SecResponseBodyLimitAction Reject