Skip to content

Delimiters in @pm, @within, etc. #682

Open
@marcstern

Description

@marcstern

For operators supporting a list of parameters (pm, within), it would be very useful to allow to choose the delimiter.
For example, there is no way to use @pm with the string "a b c".
Remark: "a|20|b|20|c" does not work, which is for me a bug.

I propose to use the first non-alphanumeric character after @pm as a separator.
Ex. using / as separator: @pm/Sharepoint Active-X Upload Control
Pipe (|) should probably be refused because of the snort syntax.

Activity

marcstern

marcstern commented on Aug 14, 2015

@marcstern
Author

Any news on this?

quenenni

quenenni commented on Jul 5, 2016

@quenenni

I'm also interested in this feature.

How can I put:

  • the good
  • the bad
  • the ugly
    in a pm action.
    As "3. The @pm operator phrases do not support metacharacters. ", I don't see how I can do this.

I could try to use an external file and use pmf, but there is still the #1167 issue to resolve/understand.

self-assigned this
on Mar 8, 2018
modified the milestones: v3.0.4, v3.0.3 on Oct 1, 2018
added
3.xRelated to ModSecurity version 3.x
on Oct 1, 2018
modified the milestones: v3.0.3, v3.0.4 on Oct 18, 2018
removed this from the v3.1.0 milestone on Nov 21, 2019
linked a pull request that will close this issue on Aug 19, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

    Development

    Participants

    @zimmerle@quenenni@marcstern@victorhora

    Issue actions

      Delimiters in @pm, @within, etc. · Issue #682 · owasp-modsecurity/ModSecurity