diff --git a/tests/regression/tests/REQUEST-934-APPLICATION-ATTACK-GENERIC/934170.yaml b/tests/regression/tests/REQUEST-934-APPLICATION-ATTACK-GENERIC/934170.yaml index 6bfb8accb..35a1941e6 100644 --- a/tests/regression/tests/REQUEST-934-APPLICATION-ATTACK-GENERIC/934170.yaml +++ b/tests/regression/tests/REQUEST-934-APPLICATION-ATTACK-GENERIC/934170.yaml @@ -39,3 +39,20 @@ tests: uri: "/get?ssrf=data://text/plain;base64,SSBsb3ZlIFBIUAo=" output: no_log_contains: id "934170" + - test_title: 934170-3 + desc: "Status Page Test - SSRF - data: scheme test - simple trigger, isolated test" + stages: + - stage: + input: + dest_addr: "127.0.0.1" + port: 80 + headers: + Host: "localhost" + User-Agent: "ModSecurity CRS 3 Tests" + Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5 + Accept-Encoding: gzip,deflate + Accept-Language: en-us,en;q=0.5 + method: GET + uri: "/get?ssrf=data:text/plain" + output: + log_contains: id "934170"