Comments (5)
rcbarnett-zz
commented on May 21, 2024
Original reporter: brectanus
from modsecurity.
rcbarnett-zz
commented on May 21, 2024
brectanus: Patch against 2.5.6
from modsecurity.
rcbarnett-zz
commented on May 21, 2024
ivanr: I am not sure if we are doing the right thing here. We will enforce request body limit even if request body access is disabled. I would think that if one disabled request body access that we should stay away from request bodies?
from modsecurity.
rcbarnett-zz
commented on May 21, 2024
brectanus: I added a check for (msr->txcfg->reqbody_access == 1) as well, so both ctl:ruleEngine=off and ctl:requestBodyAccess=off will work now.
Additionally, I added some regression tests for this.
Changeset 1204
from modsecurity.
rcbarnett-zz
commented on May 21, 2024
brectanus: Changeset: 1150
from modsecurity.
Related Issues (20)
- Problem with logfile's name HOT 4
- SecStatusEngine should be "Off" in modsecurity.conf-recommended HOT 1
- SanitiseArg does not work in RequestBody
- SanitiseArg does not work in RequestBody HOT 5
- malloc error when executing make (debian11, nginx) HOT 11
- SecAuditLogFormat set to JSON prints logs in native format aswell HOT 7
- Debian package dependencies are broken HOT 10
- base64decode behaviour HOT 3
- NULL pointer checks & compiler warnings HOT 1
- SecGeoLookupDb /etc/nginx/geoip/GeoLite2-City.mmdb crashes ingress-controller if it cannot be read HOT 9
- Enhancement: Improve log statement for SecArgumentsLimit issue instead of JSON parsing error HOT 4
- SecRuleScript actions always considered disruptive HOT 1
- libmodsecurity3: Request body is not logged HOT 10
- How to disable some logs? HOT 27
- Annoying DNS queries with @rbl operator HOT 18
- Feature request: Limit the number of rules processed per request HOT 3
- SecAuditLogPart 'E' is logged even if it is not configured HOT 7
- Error: Could not set variable "ip.brute_force_counter" and Could not set variable "ip.xmlrpc_counter" as the collection does not exist. HOT 6
- Is it possible to change the SecAuditLogStorageDir variable so that the logs are sorted by vhost?
- Lua installed, but Modsecurity still dont work with it HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from modsecurity.