Skip to content

Commit 9ada0a2

Browse files
author
Felipe Zimmerle
committed
Changes the default configuration to mimic v2 behavior on multipart
Further info on: #1747, #1924
1 parent 31c8d4c commit 9ada0a2

File tree

2 files changed

+7
-5
lines changed

2 files changed

+7
-5
lines changed

CHANGES

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -88,7 +88,7 @@ v3.0.3 - YYYY-MMM-DD (to be released)
8888
- Fixed LMDB collection errors
8989
[Issue #1787 - @airween, @zimmerle]
9090
- Fixed false positive MULTIPART_UNMATCHED_BOUNDARY errors
91-
[Issue #1747 - @airween]
91+
[Issue #1747, #1924 - @airween, @victorhora, @defanator, @zimmerle]
9292
- Fix ip tree lookup on netmask content
9393
[Issue #1793 - @tinselcity, @zimmerle]
9494
- Changes the behavior of the default sec actions

modsecurity.conf-recommended

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -114,10 +114,12 @@ FL %{MULTIPART_FILE_LIMIT_EXCEEDED}'"
114114
# allowed.
115115
#
116116

117-
SecRule MULTIPART_UNMATCHED_BOUNDARY "!@eq 0" \
118-
"id:'200004',phase:2,t:none,log,deny,msg:'Multipart parser detected a possible unmatched boundary.'"
119-
#SecRule MULTIPART_UNMATCHED_BOUNDARY "@eq 1" \
120-
#"id:'200004',phase:2,t:none,log,deny,msg:'Multipart parser detected a possible unmatched boundary.'"
117+
#
118+
# See #1747 and #1924 for further information on the possible values for
119+
# MULTIPART_UNMATCHED_BOUNDARY.
120+
#
121+
SecRule MULTIPART_UNMATCHED_BOUNDARY "@eq 1" \
122+
"id:'200004',phase:2,t:none,log,deny,msg:'Multipart parser detected a possible unmatched boundary.'"
121123

122124

123125
# PCRE Tuning

0 commit comments

Comments
 (0)