github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-08-13 13:26:01 +03:00
Code Issues Packages Projects Releases Wiki Activity

Updated Ideas for Google Summer of Code 2016 (markdown)

Marc Stern 2016-02-17 13:51:29 +01:00
parent 8d74343f89
commit 5cabbb08e0
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Ideas-for-Google-Summer-of-Code-2016.md

@ -62,9 +62,9 @@ t:encrypt(%{TX.mykey}%)
###ModSecurity sub-phases
**Brief explanation:** ModSecurity supports real phases 1-4 and the 'virtual' one 5. Having intermediate virtual phases, like phase:2.2, would allow to order rules inside a real phase. This is especially useful for configurations integrating rules provided, for example, by a hoster and customs ones.
**Expected results:** Rules will be ordered, inside a phase, not only based on their occurence but also based on their sub-phase.
**References:** https://github.com/SpiderLabs/ModSecurity/issues/371
**Example:**
- SecRule ... phase:2.6,id:1
- SecRule ... phase:2,id:2
- SecRule ... phase:2.3,id:3
Execution order: 2, 3, 1
**References:** https://github.com/SpiderLabs/ModSecurity/issues/371