Skip to content

Instantly share code, notes, and snippets.

@zimmerle
Created January 11, 2018 16:54
Show Gist options
  • Save zimmerle/634d14fe55c64aa786a4ac5954d547cf to your computer and use it in GitHub Desktop.
Save zimmerle/634d14fe55c64aa786a4ac5954d547cf to your computer and use it in GitHub Desktop.
From b129d1fb16a2a9873ee56125d2dd51cf7f5a3c9f Mon Sep 17 00:00:00 2001
From: Felipe Zimmerle <[email protected]>
Date: Thu, 11 Jan 2018 13:48:38 -0300
Subject: [PATCH] Uses MULTIPART_MISSING_SEMICOLON instead of
MULTIPART_SEMICOLON_MISSING
MULTIPART_SEMICOLON_MISSING does not exists in SecLang nor in ModSec.
---
rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf b/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf
index 55ca4db..d98137e 100644
--- a/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf
+++ b/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf
@@ -178,7 +178,7 @@ SecRule MULTIPART_STRICT_ERROR "!@eq 0" \
DA %{MULTIPART_DATA_AFTER},\
HF %{MULTIPART_HEADER_FOLDING},\
LF %{MULTIPART_LF_LINE},\
- SM %{MULTIPART_SEMICOLON_MISSING},\
+ SM %{MULTIPART_MISSING_SEMICOLON},\
IQ %{MULTIPART_INVALID_QUOTING},\
IH %{MULTIPART_INVALID_HEADER_FOLDING},\
FLE %{MULTIPART_FILE_LIMIT_EXCEEDED}',\
--
2.15.1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment