Commitd7383c3

Marc Stern

authored and

Felipe Zimmerle

committed

Option to disable logging of dechunking

1 parenta4724df commitd7383c3Copy full SHA for d7383c3

File tree

+24

-1

lines changed

+24

-1

lines changed

Lines changed: 2 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,8 @@`
`1`	`1`	`DD MMM YYYY - 2.9.2 - To be released`
`2`	`2`	`------------------------------------`
`3`	`3`
	`4`	`+ * {dis\|en}able-dechunk-logging: Option to disable logging of`
	`5`	`+ dechunking in audit log when log level < 9.`
`4`	`6`	`* Updates libinjection to: da027ab52f9cf14401dd92e34e6683d183bdb3b4`
`5`	`7`	`[ModSecurity team]`
`6`	`8`	`* {dis\|en}able-handler-logging: Option to disable logging of Apache handler`

Lines changed: 6 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -1170,6 +1170,9 @@ void sec_audit_logger_json(modsec_rec *msr) {`
`1170`	`1170`	`/* Our response body does not contain chunks */`
`1171`	`1171`	`/* ENH Only write this when the output was chunked. */`
`1172`	`1172`	`/* ENH Add info when request body was decompressed, dechunked too. */`
	`1173`	`+#ifdefLOG_NO_DECHUNK`
	`1174`	`+if (msr->txcfg->debuglog_level >=9)`
	`1175`	`+#endif`
`1173`	`1176`	`if (wrote_response_body) {`
`1174`	`1177`	`yajl_kv_bool(g,"response_body_dechunked",1);`
`1175`	`1178`	`}`
`@@ -2002,6 +2005,9 @@ void sec_audit_logger_native(modsec_rec *msr) {`
`2002`	`2005`	`/* Our response body does not contain chunks */`
`2003`	`2006`	`/* ENH Only write this when the output was chunked. */`
`2004`	`2007`	`/* ENH Add info when request body was decompressed, dechunked too. */`
	`2008`	`+#ifdefLOG_NO_DECHUNK`
	`2009`	`+if (msr->txcfg->debuglog_level >=9)`
	`2010`	`+#endif`
`2005`	`2011`	`if (wrote_response_body) {`
`2006`	`2012`	`text=apr_psprintf(msr->mp,"Response-Body-Transformed: Dechunked\n");`
`2007`	`2013`	`sec_auditlog_write(msr,text,strlen(text));`

Lines changed: 16 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -487,6 +487,21 @@ AC_ARG_ENABLE(handler-logging,`
`487`	`487`	`log_handler=''`
`488`	`488`	`])`
`489`	`489`
	`490`	`+# Disable logging of dechunking`
	`491`	`+AC_ARG_ENABLE(dechunk-logging,`
	`492`	`+AS_HELP_STRING([--enable-dechunk-logging],`
	`493`	`+[Enable logging of dechunking in audit log when log level < 9. This is the default]),`
	`494`	`+[`
	`495`	`+ if test "$enableval" != "no"; then`
	`496`	`+ log_dechunk=`
	`497`	`+ else`
	`498`	`+ log_dechunk="-DLOG_NO_DECHUNK"`
	`499`	`+ fi`
	`500`	`+],`
	`501`	`+[`
	`502`	`+ log_dechunk=''`
	`503`	`+])`
	`504`	`+`
`490`	`505`	`# Ignore configure errors`
`491`	`506`	`AC_ARG_ENABLE(errors,`
`492`	`507`	`AS_HELP_STRING([--disable-errors],`
`@@ -737,7 +752,7 @@ else`
`737`	`752`	`fi`
`738`	`753`	`fi`
`739`	`754`
`740`		`-MODSEC_EXTRA_CFLAGS="$pcre_study $pcre_match_limit $pcre_match_limit_recursion $pcre_jit $request_early $htaccess_config $lua_cache $debug_conf $debug_cache $debug_acmp $debug_mem $perf_meas $modsec_api $cpu_type $unique_id $log_filename $log_server $log_collection_delete_problem"`
	`755`	`+MODSEC_EXTRA_CFLAGS="$pcre_study $pcre_match_limit $pcre_match_limit_recursion $pcre_jit $request_early $htaccess_config $lua_cache $debug_conf $debug_cache $debug_acmp $debug_mem $perf_meas $modsec_api $cpu_type $unique_id $log_filename $log_server $log_collection_delete_problem $log_dechunk"`
`741`	`756`
`742`	`757`	`APXS_WRAPPER=build/apxs-wrapper`
`743`	`758`	`APXS_EXTRA_CFLAGS=""`

Comments

(0)