Hi,
I wonder what is the meaning of rules in the following structure:
&TX:'/REGEXP/'
since '&' is the counter operator, and as far as I know, at least
according to "ModSecurity Handboo" by "Ivan Ristic", TX is used to capture
data and it range from 0 to 9.
So I would expect a numeric parameter rather than a regular expression
(e.g. TX:0, TX:1, etc.).
Those are found all over files under '/slr_rules'.
examples:
SecRule &TX:'/RFI.*ARGS:pathForArdeaCore/' "@gt 0"
SecRule &TX:'/RFI.*ARGS:page_include/' "@gt 0"
SecRule &TX:'/RFI.*ARGS:LibDir/' "@gt 0"
and many more...
_______________________________________________
Owasp-modsecurity-core-rule-set mailing list
[email protected]
https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set
