secrules_parsing

secrules_parsing copied to clipboard

Handling `&` correctly

4

Based on [this PR](https://github.com/coreruleset/nextcloud-rule-exclusions-plugin/pull/62#discussion_r1560613907) it seems that some engines (libmodsecurity3) allow the `&` sign with each variables (eg. `REQUEST_BODY_LENGTH`) even it makes no sense (what about Coraza?). Apache2 reports a...

airween

Signed-off-by: Felipe Zipitria I had this idea in local branches that I'm pushing now to share. Moving to classes and simplifying parsing. Of course we need to do semantic checks...

fzipi