~catchesastarnet/cstar-modsec/trunk : changes

~catchesastarnet/cstar-modsec/trunk » Changes from revision 1230

From Revision 1230 to 1211

Rev	Summary	Authors	Tags	Date
1230	Adds information about the pull request #1060 on the CHANGES... Adds information about the pull request #1060 on the CHANGES file	Felipe Zimmerle		8 years ago
1229	This is fix for reborn of This is fix for reborn of https://github.com/SpiderLabs/ModSecurity/issues/334 This bug has been reborn, because Apache (at least in RedHat/CentOS) since version 2.2.15-47 returns in same case APR_INCOMPLETE (not APR_EOF). Based on same patch I have added handler for APR_INCOMPLETE.	root		8 years ago
1228	Version 2.9.1 (final) Version 2.9.1 (final) Increasing version to 2.9.1 (final)	Felipe Zimmerle		8 years ago
1227	Version 2.9.1 Version 2.9.1 Increasing version to 2.9.1 and performed small fixes on the CHANGES file	Felipe Zimmerle	v2.9.1-rc1	8 years ago
1226	Fix compilation issue on "pedantic" compilers Fix compilation issue on "pedantic" compilers	Felipe Zimmerle		8 years ago
1225	Fixed broken link in readme #1059 Fixed broken link in readme #1059	Chaim Sanders		8 years ago
1224	Adds information about the pull request #914 on the CHANGES ... Adds information about the pull request #914 on the CHANGES file	Felipe Zimmerle		8 years ago
1223	Updates to parse_modsec.pl Updates to parse_modsec.pl	Robert Paprocki		8 years ago
1222	Add JSON log parse script Add JSON log parse script	Robert Paprocki		8 years ago
1221	Whitespace fix for pull request Whitespace fix for pull request	Robert Paprocki		8 years ago
1220	Fix 'is_chained' value for final rule in chain Fix 'is_chained' value for final rule in chain 'is_chained' should be true for an actionset when the is_chained member of the struct is true, or when its rule has a valid chain_starter member.	Robert Paprocki		8 years ago
1219	Do not compile in JSON logging support if yajl is not found Do not compile in JSON logging support if yajl is not found	Robert Paprocki		8 years ago
1218	Clean up JSON rule writer Clean up JSON rule writer * Escape rule actionset metadata * Escape and truncate logdata * Lazily add actionset tags as an array * Add negated rule op_param * Add unparsed rule representation	Robert Paprocki		8 years ago
1217	Update JSON structure for matched rules Update JSON structure for matched rules Create a separate map for each matched rule chain, making it easier to identify chains in which only a portion of rules actually matched.	Robert Paprocki		8 years ago
1216	Make JSON audit logging a configurable option Make JSON audit logging a configurable option Remove compile-time setting for generating audit logs as JSON, creating a new config option (SecAuditLogFormat). sec_audit_logger is now a wrapper for sec_audit_logger_json or sec_audit_logger_native. This has the disadvantage of making the audit log generation code harder to maintain, but the logger function itself now is no longer pepper with binary branches.	Robert Paprocki		8 years ago
1215	Additional updates for JSON logging Additional updates for JSON logging * Write Stopwatch2 values into a separate map * Remove legacy Stopwatch * Proper sanitization of request/response headers * Lazily open maps for keys that may not have content	Robert Paprocki		8 years ago
1214	first pass at JSON logging implementation first pass at JSON logging implementation	Robert Paprocki		8 years ago
1213	Adds information about the pull request #852 on the CHANGES ... Adds information about the pull request #852 on the CHANGES file	Felipe Zimmerle		8 years ago
1212	Replicates CREATEMODE patch to the secondary auditlog file Replicates CREATEMODE patch to the secondary auditlog file At patch 45805be, @littlecho changed the behaviour to set the audit log index/serial file permission. Before, it was using the default permission now it is respecting the permission configured via SecAuditLogFileMode. This patch replicates @littlecho's work to the secundary auditlog file.	Felipe Zimmerle		8 years ago
1211	Update apache2_config.c Update apache2_config.c Change third parameter(which is the apr file permission flag) from CREATEMODE to dcfg->auditlog_fileperms. Due to the user can specify the desired file permission setting for the audit log files with setting the value of SecAuditLogFileMode, we should follow the file permission setting from the config file. Therefore, as the dcfg->auditlog_fileperms will be modified in cmd_audit_log_dirmode function, we can use the value while calling apr_file_open to meet the file permission that specified in modsecurity.conf.	littlecho		8 years ago

Older »