github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-11-21 11:36:40 +03:00
Code Issues Packages Projects Releases Wiki Activity

Adding missing variables / directives (PERF_ALL, STATUS_LINE)

Victor Hora
2017-06-06 15:11:23 -04:00
parent 9ff0d9eeaa
commit a7ed9cb673
1 changed files with 19 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
Reference-Manual.mediawiki

@@ -2171,6 +2171,13 @@ Contains the extra request URI information, also known as path info. (For exampl
<code>SecRule PATH_INFO "^/(bin|etc|sbin|opt|usr)" "id:33"</code>
== PERF_ALL ==
This special variable contains a string that’s a combination of all other performance variables, arranged in the same order in which they appear in the Stopwatch2 audit log header. It’s intended for use in custom Apache logs
'''Version:''' 2.6.0-2.9.x
'''Supported on libModSecurity:''' TBI
== PERF_COMBINED ==
Contains the time, in microseconds, spent in ModSecurity during the current transaction. The value in this variable is arrived to by adding all the performance variables except PERF_SREAD (the time spent reading from persistent storage is already included in the phase measurements).
@@ -2572,6 +2579,18 @@ SecRule SESSION:blocked "@eq 1" "phase:2,id:73,deny,status:403"
== SESSIONID ==
This variable contains the value set with setsid. See SESSION (above) for a complete example.
== STATUS_LINE ==
This variable holds the full status line sent by the server (including the request method and HTTP version information).
<pre>
# Generate an alert when the application generates 500 errors.
SecRule STATUS_LINE "@contains 500" "phase:3,id:49,log,pass,logdata:'Application error detected!,t:none"
</pre>
'''Version:''' 2.6.0-2.9.x
'''Supported on libModSecurity:''' No
== STREAM_INPUT_BODY ==
'''Version:''' 2.6.0-2.9.x