Marc Stern

Results 153 comments of Marc Stern

Another feature asked by many people is the possibility to parse a JSON from a custom variable (like the value of a cookie, maybe after base64-decode - yes, everybody thinks...

> About Wildcards in JSON: regex in targets is definitely a must Btw, it's possible to create a rule to match the targets and add them one by one. It's...

> > Remark about v2 JSON parsing: you also have arrays appearing in the ARGS names, but without index, like "json.b.array.a1". My 2 cents: from a security point of view,...

> > > Remark about v2 JSON parsing: you also have arrays appearing in the ARGS names, but without index, like "json.b.array.a1". My 2 cents: from a security point of...

PCRE2_DOTALL & PCRE2_DOLLAR_ENDONLY look the right way for me as we need to check multiline ARGS

These are the libraries that are reported (by their authors and third-parties) as the fastest: - https://github.com/stephenberry/glaze - https://github.com/simdjson/simdjson - https://ibireme.github.io/yyjson/ It would be interesting to check their functionalities for...

This would definitely need extensive test cases

It's currently a global setting, but nothing would forbid to set it at the location level, as the value is used in each msc_pregcomp_ex() individually.

I mean we could implement a change in the code

Hi @Orgoth, we didn't had the time to work on this (a lot of higher priorities). If somebody wants to create a PR, this could speed things up.