github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-15 23:55:03 +03:00
Code Issues Packages Projects Releases Wiki Activity
ModSecurity/test/test-cases/regression
History
Felipe Zimmerle ee50fea266
Handling key exceptions on the variable itself 
This is the first step towords to solve #1697
2018-09-24 16:16:30 -03:00
..
action-allow.json
Improve action-allow test titles
2017-08-20 20:00:28 -03:00
action-block.json
Check for disruptive action on SecDefaultAction
2018-02-28 14:02:47 -03:00
action-ctl_request_body_access.json
Fix matching condition and adjust test case
2018-09-11 20:53:17 -03:00
action-ctl_request_body_processor_urlencoded.json
Set the correct variable (m_requestBodyType) and add test case
2018-08-22 22:46:37 -03:00
action-ctl_request_body_processor.json
XML Parser: removes unnecessary message from debug logs
2017-04-05 09:40:05 -03:00
action-ctl_rule_engine.json
Adds test case for the ctl:ruleEngine action
2017-07-27 22:10:58 -03:00
action-ctl_rule_remove_by_id.json
Adds support for ctl:ruleRemoveByTag action
2018-03-26 17:01:53 -03:00
action-ctl_rule_remove_by_tag.json
Adds support for ctl:ruleRemoveByTag action
2018-03-26 17:01:53 -03:00
action-ctl_rule_remove_target_by_id.json
fix: remove target by {id,tag} are now considering collections
2017-07-25 09:19:21 -03:00
action-ctl_rule_remove_target_by_tag.json
fix: remove target by {id,tag} are now considering collections
2017-07-25 09:19:21 -03:00
action-disruptive.json
Changes the behavior of the default sec actions
2018-05-31 14:52:53 -03:00
action-exec.json
Makes lua optional
2017-11-06 00:44:54 -03:00
action-id.json
Using run time string on the operators
2018-02-20 13:40:00 -03:00
action-initcol.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
action-msg.json
setvar: needs review
2016-11-28 12:12:04 -03:00
action-setrsc.json
Adds support to setrsc action
2017-06-09 16:59:04 -03:00
action-setsid.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
action-setuid.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
action-skip.json
Using run time string on the operators
2018-02-20 13:40:00 -03:00
action-tag.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
action-tnf-base64.json
Fix utils::string::ssplit() to handle delimiter in the end of string
2018-04-22 11:37:30 -03:00
action-xmlns.json
Fix some improperly formatted test cases
2016-06-14 15:32:37 -03:00
actions.json
Check if response body inspection is enabled before process it
2018-05-08 10:59:30 -03:00
auditlog.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
collection-case-insensitive.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
collection-lua.json
Add test cases for m.setvar in Lua scripts
2018-09-19 19:47:05 -04:00
collection-regular_expression_selection.json
Fix regular expression test case and updates the test list
2017-03-06 15:01:52 -03:00
collection-resource.json
Using shared var for variables names
2018-02-20 13:40:01 -03:00
collection-tx-with-macro.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
collection-tx.json
#1818: Variable names must match fully, not partially; also revert to hash table lookup instead of linear search; add test case
2018-06-26 10:47:03 -03:00
config-body_limits.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
config-calling_phases_by_name.json
Check if response body inspection is enabled before process it
2018-05-08 10:59:30 -03:00
config-include-bad.json
Using run time string on the operators
2018-02-20 13:40:00 -03:00
config-include.json
Adds verbose message when a resource is not found.
2017-05-02 13:39:37 -03:00
config-remove_by_id.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
config-remove_by_msg.json
Adds support for SecRuleRemoveByTag
2017-11-07 14:52:50 -03:00
config-remove_by_tag.json
Adds support for SecRuleRemoveByTag
2017-11-07 14:52:50 -03:00
config-response_type.json
Check if response body inspection is enabled before process it
2018-05-08 10:59:30 -03:00
config-secdefaultaction.json
Changes the behavior of the default sec actions
2018-05-31 14:52:53 -03:00
config-secremoterules.json
Adds support for curl resource on the regression tests
2017-03-06 15:02:01 -03:00
config-update-target-by-id.json
Adds support to SecRuleUpdateTargetById
2017-07-04 13:13:13 -07:00
config-update-target-by-msg.json
Adds support for update target by message
2017-11-06 23:29:25 -03:00
config-update-target-by-tag.json
Adds test case to UpdateTargetByTag
2017-07-04 11:00:11 -07:00
config-xml_external_entity.json
Adds support to SecXMLExternalEntity
2016-05-18 17:02:15 -03:00
debug_log.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
directive-sec_rule_script.json
Adds missing SecRuleScript test case
2017-11-06 23:27:00 -03:00
issue-394.json
Refactoring on the audit logs implementation
2016-12-14 23:17:28 -03:00
issue-960.json
Update issue-960.json with 3rd test.
2015-11-23 10:08:21 -03:00
issue-1152.json
Fix pass action behaviour: now only ingore actions within the same rule
2016-07-01 11:01:51 -03:00
issue-1528.json
Using run time string on the operators
2018-02-20 13:40:00 -03:00
issue-1565.json
Adds test case for issue #1565
2017-10-11 23:19:20 -03:00
issue-1576.json
Adds test case for issue #1576
2017-11-13 22:32:55 -03:00
issue-1591.json
Support pipes inside quoted variable selection
2017-10-20 11:02:42 -03:00
issue-1743.json
Fix github_issue reference in regression test
2018-04-23 22:09:03 -03:00
issue-1785.json
Allow empty strings to be evaluated by regex::searchAll
2018-06-18 22:11:48 -03:00
issue-1812.json
Adds test case for: #1812
2018-09-05 16:00:42 -03:00
issue-1831.json
Handling key exceptions on the variable itself
2018-09-24 16:16:30 -03:00
misc-variable-under-quotes.json
Consideres under quote variable while loading the rules
2017-10-06 20:25:20 +00:00
misc.json
Refactoring on the operators parsers (2/2)
2017-03-06 15:01:50 -03:00
offset-variable.json
Revert "Treating ARGS_NAMES as an array instead of scalar"
2017-08-24 00:10:42 -03:00
operator-detectsqli.json
Adds capture action to detectSQLi
2018-03-09 12:58:00 -03:00
operator-detectxss.json
Fix broken @detectxss operator regression test
2018-04-23 22:11:00 -03:00
operator-fuzzyhash.json
Fix regression tests for fuzzyHash
2017-10-27 14:47:04 -03:00
operator-inpectFile.json
Adjust tests for @inspectFile operator
2018-03-22 23:06:42 -03:00
operator-ipMatchFromFile.json
Fix resource load on ip match from file
2018-02-22 21:23:20 -03:00
operator-rx.json
add a test for negated implicit @rx operator
2017-08-20 19:39:18 -03:00
operator-UnconditionalMatch.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
operator-validate-byte-range.json
adds a test for validateByteRange with bytes > 127
2017-08-20 20:07:54 -03:00
operator-verifycc.json
Adds capture action to verifyCC
2018-03-09 11:26:24 -03:00
operator-verifycpf.json
Adds capture action to verifyCPF
2018-03-08 19:05:31 -03:00
operator-verifyssn.json
Adds capture action to verifySSN
2018-03-09 09:42:05 -03:00
request-body-parser-json.json
Refactoring on the JSON parser
2017-11-10 17:26:23 -03:00
request-body-parser-multipart-crlf.json
Fix some improperly formatted test cases
2016-06-14 15:32:37 -03:00
request-body-parser-multipart.json
Added new tests, aligned to new UNMATCHED_BOUNDARY flag value
2018-06-12 01:09:37 -03:00
request-body-parser-xml-validade-dtd.json
Adds support to SecXMLExternalEntity
2016-05-18 17:02:15 -03:00
request-body-parser-xml.json
Adds support to SecXMLExternalEntity
2016-05-18 17:02:15 -03:00
sec_component_signature.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
secaction.json
Refactoring: Rule class
2016-11-28 13:07:25 -03:00
secmarker.json
Define m_secmarker_skipped as an integer type
2018-04-24 11:49:13 -03:00
secruleengine.json
Changes the behavior of the default sec actions
2018-05-31 14:52:53 -03:00
transformation-none.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
transformations.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-ARGS_COMBINED_SIZE.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-ARGS_GET_NAMES.json
Revert "Treating ARGS_NAMES as an array instead of scalar"
2017-08-24 00:10:42 -03:00
variable-ARGS_GET.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-ARGS_NAMES.json
Revert "Treating ARGS_NAMES as an array instead of scalar"
2017-08-24 00:10:42 -03:00
variable-ARGS_POST_NAMES.json
Revert "Treating ARGS_NAMES as an array instead of scalar"
2017-08-24 00:10:42 -03:00
variable-ARGS_POST.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-ARGS.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-AUTH_TYPE.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-DURATION.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-ENV.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-FILES_COMBINED_SIZE.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-FILES_NAMES.json
Adds offset regression tests and assorted fixes on var's offsets
2017-03-06 15:02:02 -03:00
variable-FILES_SIZES.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-FILES.json
Refactoring: Rule class
2016-11-28 13:07:25 -03:00
variable-FULL_REQUEST_LENGTH.json
dds support to CtlRequestBodyAccess
2016-10-28 09:48:10 -03:00
variable-FULL_REQUEST.json
Adds offset regression tests and assorted fixes on var's offsets
2017-03-06 15:02:02 -03:00
variable-GEO.json
Fix maxmind test case
2018-03-29 17:24:32 -03:00
variable-HIGHEST_SEVERITY.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-INBOUND_DATA_ERROR.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-MATCHED_VAR_NAME.json
Forces disruptive to be first-rule-only
2017-04-24 21:06:35 -03:00
variable-MATCHED_VAR.json
Forces disruptive to be first-rule-only
2017-04-24 21:06:35 -03:00
variable-MATCHED_VARS_NAMES.json
Forces disruptive to be first-rule-only
2017-04-24 21:06:35 -03:00
variable-MATCHED_VARS.json
Forces disruptive to be first-rule-only
2017-04-24 21:06:35 -03:00
variable-MODSEC_BUILD.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-MULTIPART_CRLF_LF_LINES.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-MULTIPART_FILENAME.json
Extends the direct access model to other collections
2017-03-06 15:02:00 -03:00
variable-MULTIPART_INVALID_HEADER_FOLDING.json
Better support for multipart
2016-06-10 09:40:08 -03:00
variable-MULTIPART_NAME.json
Extends the direct access model to other collections
2017-03-06 15:02:00 -03:00
variable-MULTIPART_STRICT_ERROR.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-MULTIPART_UNMATCHED_BOUNDARY.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-OUTBOUND_DATA_ERROR.json
Check if response body inspection is enabled before process it
2018-05-08 10:59:30 -03:00
variable-PATH_INFO.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-QUERY_STRING.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-REMOTE_ADDR.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-REMOTE_HOST.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-REMOTE_PORT.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-REMOTE_USER.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-REQBODY_PROCESSOR_ERROR.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-REQBODY_PROCESSOR.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-REQUEST_BASENAME.json
Adds more tests to REQUEST_BASENAME
2018-09-04 22:02:56 -03:00
variable-REQUEST_BODY_LENGTH.json
dds support to CtlRequestBodyAccess
2016-10-28 09:48:10 -03:00
variable-REQUEST_BODY.json
dds support to CtlRequestBodyAccess
2016-10-28 09:48:10 -03:00
variable-REQUEST_COOKIES_NAMES.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-REQUEST_COOKIES.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-REQUEST_FILENAME.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-REQUEST_HEADERS_NAMES.json
Revert "Treating ARGS_NAMES as an array instead of scalar"
2017-08-24 00:10:42 -03:00
variable-REQUEST_HEADERS.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-REQUEST_LINE.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-REQUEST_METHOD.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-REQUEST_PROTOCOL.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-REQUEST_URI_RAW.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-REQUEST_URI.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-RESPONSE_BODY.json
Check if response body inspection is enabled before process it
2018-05-08 10:59:30 -03:00
variable-RESPONSE_CONTENT_LENGTH.json
Check if response body inspection is enabled before process it
2018-05-08 10:59:30 -03:00
variable-RESPONSE_CONTENT_TYPE.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-RESPONSE_HEADERS_NAMES.json
Revert "Treating ARGS_NAMES as an array instead of scalar"
2017-08-24 00:10:42 -03:00
variable-RESPONSE_HEADERS.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-RESPONSE_PROTOCOL.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-RULE.json
Avoids string copy by working with pointers while resolving variables
2016-12-28 20:00:14 -03:00
variable-SERVER_ADDR.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-SERVER_NAME.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-SERVER_PORT.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-SESSIONID.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-STATUS.json
SecLang uses RESPONSE_STATUS as variable, not STATUS
2016-10-18 21:30:06 -03:00
variable-TIME_DAY.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-TIME_EPOCH.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-TIME_HOUR.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-TIME_MIN.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-TIME_MON.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-TIME_SEC.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-TIME_WDAY.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-TIME_YEAR.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-TIME.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-TX.json
Check if response body inspection is enabled before process it
2018-05-08 10:59:30 -03:00
variable-UNIQUE_ID.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-URLENCODED_ERROR.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-USERID.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-variation-count.json
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
variable-variation-exclusion.json
Handling key exceptions on the variable itself
2018-09-24 16:16:30 -03:00
variable-WEBAPPID.json
Adds support to WEBAPPID variable
2017-11-08 10:28:56 -03:00
variable-WEBSERVER_ERROR_LOG.json
Adds a test case for WEBSERVER_ERROR_LOG
2016-07-08 11:05:09 -03:00