Skip to content
This repository was archived by the owner on May 14, 2020. It is now read-only.

Commit f58ea8d

Browse files
authored
Merge pull request #805 from fgsch/fgsch/issue_800
Add missing msg
2 parents 5056885 + 2e7c132 commit f58ea8d

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1484,8 +1484,8 @@ SecRule REQUEST_HEADERS|!REQUEST_HEADERS:User-Agent|!REQUEST_HEADERS:Referer|!RE
14841484
# a bit different though, as \t is a natural escape for the TAB character,
14851485
# so we will avoid this (and \n, \r, etc.).
14861486
#
1487-
# This rule aims to detect non-necessary, abnormal esacpes. You could say it is
1488-
# a nice # way to forbid the backslash character where it is not needed.
1487+
# This rule aims to detect non-necessary, abnormal escapes. You could say it is
1488+
# a nice way to forbid the backslash character where it is not needed.
14891489
#
14901490
# This is a new rule at paranoia level 4. We expect quite a few false positives
14911491
# for this rule and we will later evaluate if the rule makes any sense at all.
@@ -1511,6 +1511,7 @@ SecRule REQUEST_URI|REQUEST_HEADERS|ARGS|ARGS_NAMES "(?<!\Q\\\E)\Q\\\E[cdeghijkl
15111511
ver:'OWASP_CRS/3.0.0',\
15121512
block,\
15131513
log,\
1514+
msg:'Abnormal character escapes in request',\
15141515
severity:'CRITICAL',\
15151516
capture,\
15161517
tag:'application-multi',\

0 commit comments

Comments
 (0)