github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-11-19 18:54:23 +03:00
Code Issues Packages Projects Releases Wiki Activity

Adding clarifications for ENV variable as per issue #1507 (credit @jimyolin)

Victor Hora
2017-08-04 20:59:08 -04:00
parent 0380a17721
commit acd9a854f5
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
Reference-Manual.mediawiki

@@ -2123,7 +2123,7 @@ Contains the number of milliseconds elapsed since the beginning of the current t
; Note : Starting with ModSecurity 2.7.0 the time is microseconds. ; Note : Starting with ModSecurity 2.7.0 the time is microseconds.
== ENV == == ENV ==
Collection that provides access to environment variables set by ModSecurity. Requires a single parameter to specify the name of the desired variable. Collection that provides access to environment variables set by ModSecurity or other server modules. Requires a single parameter to specify the name of the desired variable.
<pre> <pre>
# Set environment variable # Set environment variable
SecRule REQUEST_FILENAME "printenv" \ SecRule REQUEST_FILENAME "printenv" \
@@ -2131,6 +2131,9 @@ SecRule REQUEST_FILENAME "printenv" \
# Inspect environment variable # Inspect environment variable
SecRule ENV:tag "suspicious" "id:16" SecRule ENV:tag "suspicious" "id:16"
# Reading an environment variable from other Apache module (mod_ssl)
SecRule TX:ANOMALY_SCORE "@gt 0" "phase:5,id:16,msg:'%{env.ssl_cipher}'"
</pre> </pre>
; Note : Use setenv to set environment variables to be accessed by Apache. ; Note : Use setenv to set environment variables to be accessed by Apache.