Comments (6)
i belive this is an issue with the $URL:
filter and URL
matchzone. you can't have both.
from naxsi.
Do you have an example how to get to use the ANY match zone?
from naxsi.
Can you test the open PR and check if it fixes the issue?
from naxsi.
Sorry, did not find time to do this yet.
from naxsi.
it's ok, i have added a test for this.
from naxsi.
Re-compiled the module with the current version of the main branch. Yes, it's working now!
WL Rule:
BasicRule wl:1000,1011,1013 "mz:$URL:/|ANY";
Request:
$ curl "http://192.168.15.187/?id=)union%27select" -I
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Mon, 21 Nov 2022 12:53:23 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Wed, 21 Sep 2022 13:21:27 GMT
Connection: keep-alive
ETag: "632b0fd7-264"
Accept-Ranges: bytes
Thanks!
from naxsi.
Related Issues (20)
- libinjection.pc package not found HOT 5
- Error when run make HOT 4
- configure error : Cannot find 'libinjection' submodule HOT 9
- Question for testing about Thesis HOT 1
- Naxsi module version mismatch with NGINX version HOT 1
- nginx version issue HOT 1
- Does not validate the headers HOT 10
- libinjection submodule HOT 1
- No package 'libinjection' found HOT 1
- Whitelists don't work HOT 5
- nxtool doesn't work correctly on Centos 7.9.2009 HOT 2
- Wrong Port HOT 7
- Improve documentation with instructions on how to set up naxsi HOT 2
- Regex Patterns Not Matching Expected Inputs in NAXSI HOT 3
- unknown directive "MainRule" in /etc/nginx/naxsi_core.rules HOT 2
- Integrating naxsi in opnsense HOT 8
- strange behavior with rules HOT 8
- $naxsi_request_id is not populated HOT 6
- .deb package building: doc should be updated HOT 3
- Missing documentation on how to build naxsi for alpine linux HOT 4
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from naxsi.