ModSecurity

ModSecurity copied to clipboard

Debian is taking steps to remove `xml2-config` in the current development cycle. ModSecurity uses `xml2-config` to find the libxml2 include paths and linker flags. This patch uses `pkg-config` to find...

hughmcmaster

Implement support to Sanitize on v3

15

As listed at #715 the Sanitize actions are not yet working on v3. https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual-%28v2.x%29#sanitiseArg

zimmerle

ModSecurity 3.0.3 collection expirevar does not work

8

When I use collection 'IP', the variable in collection never expire even if I restart nginx. The variable in collecion expired unless I remove the files:`modsec-shared-collections` `modsec-shared-collections-lock` in disk,

sobigboy

SecAuditLogParts never logs anything for 'K' type (list of rule IDs)

3

**Describe the bug** I want to analyse POST body content but I don't want to print any POST body content (or any actual data snippets from the request, such as...

mig5

Cannot get REQUEST_FILENAME with %3f (encoded ?) in url path

11

**Describe the bug** If the url path contains %3f, cannot get real `REQUEST_FILENAME`. **Logs and dumps** ``` ModSecurity: Warning. Matched "Operator `Gt' with parameter `0' against variable `REQUEST_URI_RAW' (Value: `/path1%3fpath2?query=%3f'...

liudongmiao

fix some memory leaks for parsing & cleaning up rules

4

Abce

Adds hyperscan support to pm operator

5

xiangwang1

ngin reload memory leak

16

It often leads memory leak on nginx reload using modsecurity branch 3.1-experimental and master,I hope that the official will fix this problem as soon as possible, which has a serious...

Hello-Linux

Examples in README should be changed to work on v3.

liudongmiao

feature request: audit log only if disruptive

5

`coreruleset` v3 introduces Paranoia Level, assign score for rule, and evaluate in separate rule. In some cases, the request is not disruptive, however it's logged in audit log. We'd like...

liudongmiao