10000 Use removeWhiteSpace in 922110 · Issue #3114 · coreruleset/coreruleset · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Use removeWhiteSpace in 922110 #3114
Open
@theseion

Description

@theseion

As detailed in #3046, there's a bug in libmodsecurity3 where line break characters may be part of the header value, e.g. charset=utf-8\r\n. This leads to false positives in rule 922110. @airween found that using t:removeWhiteSpace fixes the false positives.

It appears to me that it should be possible to simplify the regular expression in 922110 by adding t:removeWhiteSpace, without impacting detection quality.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0