Simon Marechal comments

Results 191 comments of


                                            Simon Marechal

session IDs are not rendered properly in the JSON log

Should be fixed in #1111

One violation in logs when two triggers sent

This is the expected behavior, the first "block" stops the filtering. This is especially important for violations that could lead to denial of service of the filter, such as maximum...

One violation in logs when two triggers sent

not exactly, things that are about the arguments will block at once, but things that are about signatures will all be applied at the same time and you'll get all...

Content filter profiles - When request has argument with space(" ") , the evaluation is not as expected

When you use curl this way, it adds the `Content-Type: application/x-www-form-urlencoded` header. Raw spaces are indeed invalid, as they should be encoded as `%20`. Sadly, it might be the case...

Document behaviour of "default" Path Mapping in Security Policies

The entries are sorted by descending length of the regular expression, it is not that arbitrary anymore. If two REs have the same length, then it's arbitrary.

Trigger counters show incorrect data

There is indeed a bug where it would display in rate limits the statistics for global filters. cf. #1091

Lua's `userdata` is presented instead of a table

Should be fixed by PR

Trigger counters show incorrect data

@yanushg can you give me more details about the problem with the waf report?

Trigger counters show incorrect data

@yanushg I cannot reproduce this problem. This can however happen when the content filter is inactive. Can you confirm the content filter was active at that point?

Global filter - missing data in logs

(should be fixed in the attached PR)