Skip to content
New issue

v3.1.0

Open
Overdue by 5 year(s)
•
Due by November 8, 2019
Last updated Sep 26, 2024
82% complete

Issues to be handled before v3.0.4 release.

List view

0 issues of 108 selected

  • Use local memory pool inside update_rule_target_ex() to reduce memory footprint

    2.xRelated to ModSecurity version 2.x
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2177
    #2177 In owasp-modsecurity/ModSecurity;
    · by vkrivopalov was closed on May 9, 2023

  • Fix fallback for non-mapped Unicode char

    3.xRelated to ModSecurity version 3.x
    enhancement
    RIP - libmodsecurity
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 1609
    #1609 In owasp-modsecurity/ModSecurity;
    · by allanbomsft was closed on Nov 26, 2018

  • [V3] Allow the callback function to receive and log a http return code

    3.xRelated to ModSecurity version 3.x
    enhancement
    RIP - libmodsecurity
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 1919
    #1919 In owasp-modsecurity/ModSecurity;
    · by stevendore was closed on Nov 29, 2018

  • Update mbedTLS to 2.12

    3.xRelated to ModSecurity version 3.x
    enhancement
    RIP - libmodsecurity
    RIP - Type - Config Improvement
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 1890
    #1890 In owasp-modsecurity/ModSecurity;
    · by victorhora was closed on Jan 16, 2019

  • Avoid using NULL string (match) in Pm::evaluate

    3.xRelated to ModSecurity version 3.x
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2179
    #2179 In owasp-modsecurity/ModSecurity;
    · by defanator was closed on Oct 7, 2019

  • Fix: audit log part for response body for JSON format to be E

    3.xRelated to ModSecurity version 3.x
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2191
    #2191 In owasp-modsecurity/ModSecurity;
    · by martinhsv was closed on Oct 25, 2019

  • V3/issue 1960

    3.xRelated to ModSecurity version 3.x
    bugIt is a confirmed bug
    pr available
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2031
    #2031 In owasp-modsecurity/ModSecurity;
    · by airween was closed on Mar 11, 2019

  • Allow empty anchored variable to use

    3.xRelated to ModSecurity version 3.x
    enhancement
    pr available
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2024
    #2024 In owasp-modsecurity/ModSecurity;
    · by airween was closed on Feb 12, 2019

  • Aligned Cookie parsing method to ModSecurity2 style

    3.xRelated to ModSecurity version 3.x
    enhancement
    pr available
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2023
    #2023 In owasp-modsecurity/ModSecurity;
    · by airween was closed on Nov 13, 2019

  • Fixed data collecting in multipart parsing

    3.xRelated to ModSecurity version 3.x
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2016
    #2016 In owasp-modsecurity/ModSecurity;
    · by airween was closed on Feb 12, 2019

  • Fixed validateByteRange parsing method

    3.xRelated to ModSecurity version 3.x
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2017
    #2017 In owasp-modsecurity/ModSecurity;
    · by airween was closed on Feb 12, 2019

  • Make sure m_rulesMessages is filled after successfull match

    3.xRelated to ModSecurity version 3.x
    pr available
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2048
    #2048 In owasp-modsecurity/ModSecurity;
    · by victorhora was closed on Oct 16, 2019

  • Replace xml2-config, pcre-config with pkg-config.

    3.xRelated to ModSecurity version 3.x
    enhancement
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2014
    #2014 In owasp-modsecurity/ModSecurity;
    · by chuckwolber was closed on Nov 20, 2019

  • fix/minor: Error encoding hexa decimal

    3.xRelated to ModSecurity version 3.x
    enhancement
    pr available
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2068
    #2068 In owasp-modsecurity/ModSecurity;
    · by ghost was closed on May 27, 2019

  • Replace Cookie parsing method

    3.xRelated to ModSecurity version 3.x
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2201
    #2201 In owasp-modsecurity/ModSecurity;
    · by airween was closed on Nov 20, 2019

  • Fix test issue-1974

    3.xRelated to ModSecurity version 3.x
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2190
    #2190 In owasp-modsecurity/ModSecurity;
    · by martinhsv was closed on Oct 24, 2019

  • Adjusting rule chain logging; adjusting cookie header parsing

    3.xRelated to ModSecurity version 3.x
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2203
    #2203 In owasp-modsecurity/ModSecurity;
    · by martinhsv was closed on Nov 21, 2019

  • Replaced log locking using mutex with fcntl lock

    3.xRelated to ModSecurity version 3.x
    pr available
    RIP - libmodsecurity
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 1949
    #1949 In owasp-modsecurity/ModSecurity;
    · by Cloaked9000 was closed on Nov 27, 2018

  • V3/collection re fix

    3.xRelated to ModSecurity version 3.x
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2018
    #2018 In owasp-modsecurity/ModSecurity;
    · by airween was closed on Jun 1, 2019

  • New operator verifySVNR that finds Austrian social security numbers

    3.xRelated to ModSecurity version 3.x
    new featureThis is a new feature
    pr available
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2063
    #2063 In owasp-modsecurity/ModSecurity;
    · by Rufus125 was closed on May 30, 2019

  • Mitigate DoS vulnerability by limiting number of extracted arguments

    3.xRelated to ModSecurity version 3.x
    enhancement
    new featureThis is a new feature
    pr available
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2060
    #2060 In owasp-modsecurity/ModSecurity;
    · by jleproust was closed on Feb 11, 2020

  • Fix variables output in debug logs

    3.xRelated to ModSecurity version 3.x
    enhancement
    pr available
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2057
    #2057 In owasp-modsecurity/ModSecurity;
    · by jleproust was closed on May 27, 2019

  • correct typo validade in log output

    3.xRelated to ModSecurity version 3.x
    enhancement
    pr available
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2059
    #2059 In owasp-modsecurity/ModSecurity;
    · by nerrehmit was closed on May 27, 2019

  • Limit more log variables to 200 characters

    3.xRelated to ModSecurity version 3.x
    enhancement
    pr available
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2073
    #2073 In owasp-modsecurity/ModSecurity;
    · by jleproust was closed on May 27, 2019

  • V3/collection re fix

    3.xRelated to ModSecurity version 3.x
    duplicateOps. Somebody else already hit that bump
    Status: Closed (abandoned).
    owasp-modsecurity/ModSecuritynumber 2107
    #2107 In owasp-modsecurity/ModSecurity;
    · by airween was closed on Apr 22, 2020
    •