|
10 | 10 | SecRequestBodyAccess On |
11 | 11 | SecDebugLog$ENV{DEBUG_LOG} |
12 | 12 | SecDebugLogLevel9 |
13 | | -SecRule REQUEST_HEADERS:Content-Type"^text/xml\$"\\,id:500005 |
14 | | -"phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 13 | +SecRule REQUEST_HEADERS:Content-Type"^text/xml\$""id:500005,\\ |
| 14 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
15 | 15 | SecRule REQBODY_PROCESSOR"!^XML\$" nolog,pass,skipAfter:12345,id:500006 |
16 | | -SecRule XML"\@validateSchema$ENV{CONF_DIR}/SoapEnvelope.xsd"\\,id:500007 |
17 | | -"phase:2,deny,id:12345" |
| 16 | +SecRule XML"\@validateSchema$ENV{CONF_DIR}/SoapEnvelope.xsd""id:500007,\\ |
| 17 | + phase:3:,deny" |
18 | 18 | ), |
19 | 19 | match_log=> { |
20 | 20 | debug=> [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed1\).*Targetvalue:"\[XML document tree\]".*Successfully validated payload against Schema/s,1 ], |
|
59 | 59 | SecDebugLogLevel9 |
60 | 60 | SecAuditEngine RelevantOnly |
61 | 61 | SecAuditLog"$ENV{AUDIT_LOG}" |
62 | | -SecRule REQUEST_HEADERS:Content-Type"^text/xml\$"\\,id:500008 |
63 | | -"phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 62 | +SecRule REQUEST_HEADERS:Content-Type"^text/xml\$""id:500008,\\ |
| 63 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
64 | 64 | SecRule REQBODY_PROCESSOR"!^XML\$" nolog,pass,skipAfter:12345,id:500009 |
65 | | -SecRule XML"\@validateSchema$ENV{CONF_DIR}/SoapEnvelope.xsd"\\,id:500010 |
66 | | -"phase:2,deny,log,auditlog,id:12345" |
| 65 | +SecRule XML"\@validateSchema$ENV{CONF_DIR}/SoapEnvelope.xsd""id:500010\\ |
| 66 | + phase:2,deny,log,auditlog,id:12345" |
67 | 67 | ), |
68 | 68 | match_log=> { |
69 | 69 | debug=> [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed1\).*Targetvalue:"\[XML document tree\]".*'badval'isnot a validvalueof the local atomic type.*Schema validation failed/s,1 ], |
|
108 | 108 | SecDebugLogLevel9 |
109 | 109 | SecAuditEngine RelevantOnly |
110 | 110 | SecAuditLog"$ENV{AUDIT_LOG}" |
111 | | -SecRule REQUEST_HEADERS:Content-Type"^text/xml\$"\\,id:500011 |
112 | | -"phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 111 | +SecRule REQUEST_HEADERS:Content-Type"^text/xml\$""id:500011,\\ |
| 112 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
113 | 113 | SecRule REQBODY_PROCESSOR"!^XML\$" nolog,pass,skipAfter:12345,id:500012 |
114 | | -SecRule XML"\@validateSchema$ENV{CONF_DIR}/SoapEnvelope.xsd"\\,id:500013 |
115 | | -"phase:2,deny,id:12345" |
| 114 | +SecRule XML"\@validateSchema$ENV{CONF_DIR}/SoapEnvelope.xsd""id:500013\\ |
| 115 | + phase:2,deny,id:12345" |
116 | 116 | ), |
117 | 117 | match_log=> { |
118 | 118 | debug=> [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed1\).*Targetvalue:"\[XML document tree\]".*elementisnot expected/s,1 ], |
|
158 | 158 | SecDebugLogLevel9 |
159 | 159 | SecAuditEngine RelevantOnly |
160 | 160 | SecAuditLog"$ENV{AUDIT_LOG}" |
161 | | -SecRule REQUEST_HEADERS:Content-Type"^text/xml\$"\\,id:500014 |
162 | | -"phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 161 | +SecRule REQUEST_HEADERS:Content-Type"^text/xml\$""id:500014,\\ |
| 162 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
163 | 163 | SecRule REQBODY_PROCESSOR"!^XML\$" nolog,pass,skipAfter:12345,id:500015 |
164 | | -SecRule XML"\@validateSchema$ENV{CONF_DIR}/SoapEnvelope.xsd"\\,id:500016 |
165 | | -"phase:2,deny,id:12345" |
| 164 | +SecRule XML"\@validateSchema$ENV{CONF_DIR}/SoapEnvelope.xsd""id:500016,\\ |
| 165 | + phase:2,deny,id:12345" |
166 | 166 | ), |
167 | 167 | match_log=> { |
168 | 168 | debug=> [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed0\).*XML parser error.*validation failed because contentisnot well formed/s,1 ], |
|
208 | 208 | SecDebugLogLevel9 |
209 | 209 | SecAuditEngine RelevantOnly |
210 | 210 | SecAuditLog"$ENV{AUDIT_LOG}" |
211 | | -SecRule REQUEST_HEADERS:Content-Type"^text/xml\$"\\,id:500017 |
212 | | -"phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 211 | +SecRule REQUEST_HEADERS:Content-Type"^text/xml\$""id:500017\\ |
| 212 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
213 | 213 | SecRule REQBODY_PROCESSOR"!^XML\$" nolog,pass,skipAfter:12345,id:500018 |
214 | | -SecRule XML"\@validateSchema$ENV{CONF_DIR}/SoapEnvelope-bad.xsd"\\,id:500019 |
215 | | -"phase:2,deny,id:12345" |
| 214 | +SecRule XML"\@validateSchema$ENV{CONF_DIR}/SoapEnvelope-bad.xsd""id:500019\\ |
| 215 | + phase:2,deny,id:12345" |
216 | 216 | ), |
217 | 217 | match_log=> { |
218 | 218 | debug=> [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed1\).*Targetvalue:"\[XML document tree\]".*Failedtoparse the XML resource.*Failedto load Schema/s,1 ], |
|
256 | 256 | SecRequestBodyAccess On |
257 | 257 | SecDebugLog$ENV{DEBUG_LOG} |
258 | 258 | SecDebugLogLevel9 |
259 | | -SecRule REQUEST_HEADERS:Content-Type"^text/xml\$"\\,id:500020 |
260 | | -"phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 259 | +SecRule REQUEST_HEADERS:Content-Type"^text/xml\$""id:500020,\\ |
| 260 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
261 | 261 | SecRule REQBODY_PROCESSOR"!^XML\$" nolog,pass,skipAfter:12345,id:500021 |
262 | | -SecRule XML"\@validateDTD$ENV{CONF_DIR}/SoapEnvelope.dtd"\\,id:500022 |
263 | | -"phase:2,deny,id:12345" |
| 262 | +SecRule XML"\@validateDTD$ENV{CONF_DIR}/SoapEnvelope.dtd""id:500022,\\ |
| 263 | + phase:2,deny,id:12345" |
264 | 264 | ), |
265 | 265 | match_log=> { |
266 | 266 | debug=> [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed1\).*Targetvalue:"\[XML document tree\]".*Successfully validated payload against DTD/s,1 ], |
|
299 | 299 | SecRequestBodyAccess On |
300 | 300 | SecDebugLog$ENV{DEBUG_LOG} |
301 | 301 | SecDebugLogLevel9 |
302 | | -SecRule REQUEST_HEADERS:Content-Type"^text/xml\$"\\,id:500023 |
303 | | -"phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 302 | +SecRule REQUEST_HEADERS:Content-Type"^text/xml\$""id:500023,\\ |
| 303 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
304 | 304 | SecRule REQBODY_PROCESSOR"!^XML\$" nolog,pass,skipAfter:12345,id:500024 |
305 | | -SecRule XML"\@validateDTD$ENV{CONF_DIR}/SoapEnvelope.dtd"\\,id:500025 |
306 | | -"phase:2,deny,id:12345" |
| 305 | +SecRule XML"\@validateDTD$ENV{CONF_DIR}/SoapEnvelope.dtd""id:500025,\\ |
| 306 | + phase:2,deny,id:12345" |
307 | 307 | ), |
308 | 308 | match_log=> { |
309 | 309 | debug=> [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed1\).*Targetvalue:"\[XML document tree\]".*contentdoesnot follow the DTD/s,1 ], |
|
342 | 342 | SecRequestBodyAccess On |
343 | 343 | SecDebugLog$ENV{DEBUG_LOG} |
344 | 344 | SecDebugLogLevel9 |
345 | | -SecRule REQUEST_HEADERS:Content-Type"^text/xml\$"\\,id:500026 |
346 | | -"phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 345 | +SecRule REQUEST_HEADERS:Content-Type"^text/xml\$""id:500026,\\ |
| 346 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
347 | 347 | SecRule REQBODY_PROCESSOR"!^XML\$" nolog,pass,skipAfter:12345,id:500027 |
348 | | -SecRule XML"\@validateDTD$ENV{CONF_DIR}/SoapEnvelope.dtd"\\,id:500028 |
349 | | -"phase:2,deny,id:12345" |
| 348 | +SecRule XML"\@validateDTD$ENV{CONF_DIR}/SoapEnvelope.dtd""id:500028,\\ |
| 349 | + phase:2,deny,id:12345" |
350 | 350 | ), |
351 | 351 | match_log=> { |
352 | 352 | debug=> [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed0\).*XML parser error.*validation failed because contentisnot well formed/s,1 ], |
|
385 | 385 | SecRequestBodyAccess On |
386 | 386 | SecDebugLog$ENV{DEBUG_LOG} |
387 | 387 | SecDebugLogLevel9 |
388 | | -SecRule REQUEST_HEADERS:Content-Type"^text/xml\$"\\,id:500029 |
389 | | -"phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 388 | +SecRule REQUEST_HEADERS:Content-Type"^text/xml\$""id:500029,\\ |
| 389 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
390 | 390 | SecRule REQBODY_PROCESSOR"!^XML\$" nolog,pass,skipAfter:12345,id:500030 |
391 | | -SecRule XML"\@validateDTD$ENV{CONF_DIR}/SoapEnvelope-bad.dtd"\\,id:500031 |
392 | | -"phase:2,deny,id:12345" |
| 391 | +SecRule XML"\@validateDTD$ENV{CONF_DIR}/SoapEnvelope-bad.dtd""id:500031\\ |
| 392 | + phase:2,deny,id:12345" |
393 | 393 | ), |
394 | 394 | match_log=> { |
395 | 395 | debug=> [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed1\).*Targetvalue:"\[XML document tree\]".*Failedto load DTD/s,1 ], |
|