Skip to content

ModSec v3 verifyCC operator doesn't capture #1698

Closed
@michaelgranzow-avi

Description

@michaelgranzow-avi

According to the reference manual (https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#verifycc) explanation of operator verifyCC: "This operator supports the "capture" action."

However, the code in VerifyCC::evaluate() never stores the matched variables in the TX collection, whether or not "capture" is in the action list of the rule.

Metadata

Metadata

Assignees

Labels

3.xRelated to ModSecurity version 3.x

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions