|
11 | 11 | SecAction"nolog,id:500001" |
12 | 12 | ), |
13 | 13 | match_log=> { |
14 | | --error=> [ qr/ModSecurity:/,1 ], |
| 14 | +-error=> [ qr/500001/,1 ], |
15 | 15 | -audit=> [ qr/./,1 ], |
16 | 16 | debug=> [ qr/Warning\. Unconditionalmatch in SecAction\./,1 ], |
17 | 17 | }, |
|
32 | 32 | SecDebugLog$ENV{DEBUG_LOG} |
33 | 33 | SecDebugLogLevel5 |
34 | 34 | SecDefaultAction"phase:2,deny,status:403" |
35 | | - SecRule ARGS:test"value,id:500032" |
| 35 | + SecRule ARGS:test"value""id:500032" |
36 | 36 | ), |
37 | 37 | match_log=> { |
38 | | -error=> [ qr/ModSecurity:/,1 ], |
39 | | -debug=> [ qr/Rule [0-9a-f]+: SecRule"ARGS:test""\@rx value""phase:2,deny,status:403"$/m,1 ], |
| 38 | +error=> [ qr/500032/,1 ], |
| 39 | +debug=> [ qr/Rule [0-9a-f]+: SecRule"ARGS:test""\@rx value""phase:2,deny,status:403,id:500032"$/m,1 ], |
40 | 40 | }, |
41 | 41 | match_response=> { |
42 | 42 | status=> qr/^403$/, |
|
57 | 57 | ), |
58 | 58 | match_log=> { |
59 | 59 | error=> [ qr/ModSecurity:/,1 ], |
60 | | -debug=> [ qr/Rule [0-9a-f]+: SecRule"ARGS:test""\@rx value""phase:2,deny,status:403"$/m,1 ], |
| 60 | +debug=> [ qr/Rule [0-9a-f]+: SecRule"ARGS:test""\@rx value""phase:2,deny,status:403,id:500033"$/m,1 ], |
61 | 61 | }, |
62 | 62 | match_response=> { |
63 | 63 | status=> qr/^403$/, |
|
75 | 75 | SecDebugLogLevel5 |
76 | 76 | SecDefaultAction"phase:2,log,noauditlog,pass,tag:foo" |
77 | 77 | SecRule ARGS:test"value""chain,phase:2,deny,status:403,id:500034" |
78 | | - SecRule&ARGS"\@eq 1""chain,setenv:tx.foo=bar,id:500035" |
79 | | - SecRule REQUEST_METHOD"\@streq GET,id:500036" |
| 78 | + SecRule&ARGS"\@eq 1""chain,setenv:tx.foo=bar" |
| 79 | + SecRule REQUEST_METHOD"\@streq GET" |
80 | 80 | ), |
81 | 81 | match_log=> { |
82 | 82 | error=> [ qr/ModSecurity:/,1 ], |
83 | | -debug=> [ qr/Rule [0-9a-f]+: SecRule"ARGS:test""\@rx value""phase:2,log,noauditlog,tag:foo,chain,deny,status:403"\r?\n.*Rule [0-9a-f]+: SecRule"&ARGS""\@eq 1""chain,setenv:tx.foo=bar"\r?\n.*Rule [0-9a-f]+: SecRule"REQUEST_METHOD""\@streq GET"\r?\n/s,1 ], |
| 83 | +debug=> [ qr/Rule [0-9a-f]+: SecRule"ARGS:test""\@rx value""phase:2,log,noauditlog,tag:foo,chain,deny,status:403,id:500034"\r?\n.*Rule [0-9a-f]+: SecRule"&ARGS""\@eq 1""chain,setenv:tx.foo=bar"\r?\n.*Rule [0-9a-f]+: SecRule"REQUEST_METHOD""\@streq GET"\r?\n/s,1 ], |
84 | 84 | }, |
85 | 85 | match_response=> { |
86 | 86 | status=> qr/^403$/, |
|
