Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Delimiters in @pm, @within, etc. #682

Open
marcstern opened this issue Mar 19, 2014 · 2 comments · May be fixed by #2786
Open

Delimiters in @pm, @within, etc. #682

marcstern opened this issue Mar 19, 2014 · 2 comments · May be fixed by #2786
Assignees
@victorhora
Labels
3.x Related to ModSecurity version 3.x RIP - Type - Feature
Projects
v3.1.1

Comments

@marcstern
Copy link
Contributor

For operators supporting a list of parameters (pm, within), it would be very useful to allow to choose the delimiter.
For example, there is no way to use @pm with the string "a b c".
Remark: "a|20|b|20|c" does not work, which is for me a bug.

I propose to use the first non-alphanumeric character after @pm as a separator.
Ex. using / as separator: @pm/Sharepoint Active-X Upload Control
Pipe (|) should probably be refused because of the snort syntax.
@marcstern
Copy link
Contributor Author

Any news on this?

@quenenni
Copy link

quenenni commented Jul 5, 2016

I'm also interested in this feature.

How can I put:

  • the good
  • the bad
  • the ugly
    in a pm action.
    As "3. The @pm operator phrases do not support metacharacters. ", I don't see how I can do this.

I could try to use an external file and use pmf, but there is still the #1167 issue to resolve/understand.

@victorhora victorhora self-assigned this Mar 8, 2018
@victorhora victorhora mentioned this issue Oct 1, 2018
Closed
@victorhora victorhora modified the milestones: v3.0.4, v3.0.3 Oct 1, 2018
@victorhora victorhora added the 3.x Related to ModSecurity version 3.x label Oct 1, 2018
@zimmerle zimmerle modified the milestones: v3.0.3, v3.0.4 Oct 18, 2018
@zimmerle zimmerle added this to To do in v3.0.4 via automation Nov 30, 2018
@zimmerle zimmerle added this to To do in v3.1.0 via automation Oct 15, 2019
@zimmerle zimmerle removed this from To do in v3.0.4 Oct 15, 2019
@zimmerle zimmerle removed this from Backlog in v3.1.0 Nov 21, 2019
@zimmerle zimmerle added this to To do in v3.1.1 via automation Nov 21, 2019
@zimmerle zimmerle removed this from the v3.1.0 milestone Nov 21, 2019
@martinhsv martinhsv mentioned this issue Mar 16, 2022
Closed
@martinhsv martinhsv mentioned this issue May 31, 2022
Closed
This was referenced Aug 19, 2022
Open
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@victorhora victorhora

Labels
3.x Related to ModSecurity version 3.x RIP - Type - Feature
Projects
v3.1.1
  
To do
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Feature: Pm custom separator M4tteoP/ModSecurity
4 participants
@zimmerle @quenenni @marcstern @victorhora