8000 fix: fixing FPs related to rule 951220 by azurit · Pull Request #4079 · coreruleset/coreruleset · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

fix: fixing FPs related to rule 951220 #4079

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Apr 2, 2025
Merged

Conversation

azurit
Copy link
Member
@azurit azurit commented Apr 1, 2025

I'm getting lots of FPs from rule 951220 because of these two patterns:

SQL Server.*Driver
SQL Server.*[0-9a-fA-F]{8}

Both of them are too wide and general - mainly the second one is matching literally any text which contains SQL Server keyword. As i was not able to find any MS SQL server error messages which these two patters are supposed to match (so i'm not able to improve/fix it), i suggest to remove them.

Also, i improved one other pattern: 128 is a maximum length of procedure/function name in MS SQL Server.

Copy link
Contributor
github-actions bot commented Apr 1, 2025

📊 Quantitative test results for language: eng, year: 2023, size: 10K, paranoia level: 1:
🚀 Quantitative testing did not detect new false positives

@azurit azurit added this pull request to the merge queue Apr 2, 2025
Merged via the queue into coreruleset:main with commit 99d404a Apr 2, 2025
6 checks passed
@azurit azurit deleted the SQLServer2 branch April 2, 2025 11:57
@fzipi
Copy link
Member
fzipi commented Apr 2, 2025

I understand the change, but just in case, can we provide tests to see that everything is working as expected for this case?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
459F
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants
0