8000 Incorrect Regex in Rule 942440 Chained Matchvar · Issue #3287 · coreruleset/coreruleset · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Incorrect Regex in Rule 942440 Chained Matchvar #3287
Closed
@theMiddleBlue

Description

@theMiddleBlue

https://github.com/coreruleset/coreruleset/blob/v4.0/dev/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf#L1362

I've realized that there's an oversight in the regex used for the chained matchvar. At the time of implementation, I incorrectly set the range as written, but it should actually be A-Za-z to accurately capture the intended pattern.

I think the rx is working as expected just because the "-" between the two ranges is interpreted as literal hyphen. Am I wrong?

I'm going to assign this to me as a reminder for opening a PR to fix this.

Metadata

Metadata

Assignees

Labels

🐛 bugSomething isn't workingPR availablethis issue is referenced by an active pull request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions

    0