ModSecurity/test/test-cases/regression/variable-tx-regex-precompiled.json at 17474ad20f7b24afb122f8c8041c8105f8a6db71 · owasp-modsecurity/ModSecurity · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
[
  {
    "enabled": 1,
    "version_min": 300000,
    "title": "TX regex variable selector (precompiled regex) - matches in a chained rule",
    "client": {
      "ip": "200.249.12.31",
      "port": 123
    },
    "server": {
      "ip": "200.249.12.31",
      "port": 80
    },
    "request": {
      "headers": {
        "Host": "localhost",
        "User-Agent": "curl/7.38.0",
        "Content-Length": "0"
      },
      "uri": "/test",
      "method": "GET"
    },
    "response": {
      "headers": {
        "Content-Type": "text/html",
        "Content-Length": "8"
      },
      "body": ["no need."]
    },
    "expected": {
      "http_code": 403
    },
    "rules": [
      "SecRuleEngine On",
      "SecAction \"id:1,phase:1,nolog,pass,setvar:'tx.score_a=1',setvar:'tx.score_b=1',setvar:'tx.other=1'\"",
      "SecRule REQUEST_URI \"@contains /test\" \"id:2,phase:2,deny,status:403,log,chain\"",
      "    SecRule TX:/^score_/ \"@eq 1\" \"t:none\""
    ]
  },
  {
    "enabled": 1,
    "version_min": 300000,
    "title": "TX regex variable selector (precompiled regex) - selector excludes non-matching keys",
    "client": {
      "ip": "200.249.12.31",
      "port": 123
    },
    "server": {
      "ip": "200.249.12.31",
      "port": 80
    },
    "request": {
      "headers": {
        "Host": "localhost",
        "User-Agent": "curl/7.38.0",
        "Content-Length": "0"
      },
      "uri": "/test",
      "method": "GET"
    },
    "response": {
      "headers": {
        "Content-Type": "text/html",
        "Content-Length": "8"
      },
      "body": ["no need."]
    },
    "expected": {
      "http_code": 200
    },
    "rules": [
      "SecRuleEngine On",
      "SecAction \"id:1,phase:1,nolog,pass,setvar:'tx.other=1'\"",
      "SecRule REQUEST_URI \"@contains /test\" \"id:2,phase:2,deny,status:403,log,chain\"",
      "    SecRule TX:/^score_/ \"@eq 1\" \"t:none\""
    ]
  }
]