zimmerle

http {
    server {
        listen       80;
        server_name  localhost;

        error_page 404 /40x.html;
        location = /40x.html {
            root /srv/http;
            internal;
        }

zimmerle

	.file	"vlad.cc"
	.section	.rodata
	.type	_ZStL19piecewise_construct, @object
	.size	_ZStL19piecewise_construct, 1
_ZStL19piecewise_construct:
	.zero	1
	.local	_ZStL8__ioinit
	.comm	_ZStL8__ioinit,1,1
.LC0:
	.string	"%{"

zimmerle

	.file	"orig.cc"
	.section	.rodata
	.type	_ZStL19piecewise_construct, @object
	.size	_ZStL19piecewise_construct, 1
_ZStL19piecewise_construct:
	.zero	1
	.local	_ZStL8__ioinit
	.comm	_ZStL8__ioinit,1,1
.LC0:
	.string	"%{"

zimmerle

([^%\']|(\\\')|([^\\\\]+\\\%\{)|(%[^{]))+

zimmerle

From b129d1fb16a2a9873ee56125d2dd51cf7f5a3c9f Mon Sep 17 00:00:00 2001
From: Felipe Zimmerle <[email protected]>
Date: Thu, 11 Jan 2018 13:48:38 -0300
Subject: [PATCH] Uses MULTIPART_MISSING_SEMICOLON instead of
 MULTIPART_SEMICOLON_MISSING

MULTIPART_SEMICOLON_MISSING does not exists in SecLang nor in ModSec.
---
 rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

zimmerle

TESTS=test/test-cases/regression/issue-1591.json test/test-cases/regression/variable-RESPONSE_HEADERS.json test/test-cases/regression/config-include.json test/test-cases/regression/variable-WEBSERVER_ERROR_LOG.json test/test-cases/regression/operator-fuzzyhash.json test/test-cases/regression/config-xml_external_entity.json test/test-cases/regression/transformation-none.json test/test-cases/regression/action-allow.json test/test-cases/regression/action-ctl_rule_remove_by_tag.json test/test-cases/regression/operator-verifycc.json test/test-cases/regression/variable-variation-exclusion.json test/test-cases/regression/variable-MULTIPART_UNMATCHED_BOUNDARY.json test/test-cases/regression/action-ctl_rule_remove_target_by_id.json test/test-cases/regression/variable-USERID.json test/test-cases/regression/variable-PATH_INFO.json test/test-cases/regression/variable-STATUS.json test/test-cases/regression/operator-detectsqli.json test/test-cases/regression/collection-case-insensitive.json test/test-cases/regression/confi

zimmerle

TESTS+=test/test-cases/regression/issue-1591.json
TESTS+=test/test-cases/regression/variable-RESPONSE_HEADERS.json
TESTS+=test/test-cases/regression/config-include.json
TESTS+=test/test-cases/regression/variable-WEBSERVER_ERROR_LOG.json
TESTS+=test/test-cases/regression/operator-fuzzyhash.json
TESTS+=test/test-cases/regression/config-xml_external_entity.json
TESTS+=test/test-cases/regression/transformation-none.json
TESTS+=test/test-cases/regression/action-allow.json
TESTS+=test/test-cases/regression/action-ctl_rule_remove_by_tag.json
TESTS+=test/test-cases/regression/operator-verifycc.json

zimmerle

/*
 * ModSecurity, http://www.modsecurity.org/
 * Copyright (c) 2018 Trustwave Holdings, Inc. (http://www.trustwave.com/)
 *
 * You may not use this file except in compliance with
 * the License.  You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * If any of the files related to licensing are missing or if you have any

zimmerle

[
  {
    "enabled": 1,
    "version_min": 209000,
    "version_max": -1,
    "title": "Should libmodsec pass action clear m_actions?",
    "url": "https:\/\/github.com\/SpiderLabs\/ModSecurity\/issues\/1767",
    "client": {
      "ip": "200.249.12.31",
      "port": 2313

zimmerle

[
  {
    "enabled":1,
    "version_min":300000,
    "title":"ctl:requestBodyProcessor=URLENCODED",
    "client":{
      "ip":"200.249.12.31",
      "port":123
    },
    "server":{