v3.1.0

Issues

• "Database is not open. Use: SecGeoLookupDb directive." after reload

  3.xbugenhancementpr availableworkaround available
  owasp-modsecurity/ModSecurity#2041 · Filter by author jptosso opened on Mar 7, 2019 · v3.1.0
  16

  

• append data to variables

  2.x3.xnew featureRIP - Type - FeatureTBF by libmodsec
  owasp-modsecurity/ModSecurity#340 · Filter by author rcbarnett-zz opened on Oct 17, 2013 · v3.1.0
  22

  

• Parser: a bare % in an operator parameter breaks the rule ("Rules must have an ID")

  3.xbugenhancementparser
  owasp-modsecurity/ModSecurity#2145 · Filter by author fgsch opened on Aug 7, 2019 · v3.1.0
  4

  

• Incomplete type declaration for KeyExclusions [pymodsecurity]

  3.xenhancementneeds decision
  owasp-modsecurity/ModSecurity#2078 · Filter by author GustavoKatel opened on Apr 25, 2019 · v3.1.0
  2

  

• Add interface in libModSecurity for reopening log files

  3.xhelp wantednew featurepr availableRIP - libmodsecurityRIP - Type - Feature
  owasp-modsecurity/ModSecurity#1968 · Filter by author victorhora opened on Nov 28, 2018 · v3.1.0
  5

  

• Support the count modifier (%{&VAR}) in macro expansion

  2.x3.xenhancementTBF by libmodsec
  owasp-modsecurity/ModSecurity#215 · Filter by author rcbarnett-zz opened on Oct 17, 2013 · v3.1.0
  6

  

• Santization issues when using part H

  2.xbugenhancementTBF by libmodsec
  owasp-modsecurity/ModSecurity#535 · Filter by author rcbarnett-zz opened on Oct 17, 2013 · v3.1.0
  3

  

• sanitiseMatchedBytes only sanitizes the first match

  2.xbugenhancementPlatform - ApachePlatform - IISPlatform - JavaPlatform - NginxPlatform - StandaloneTBF by libmodsec
  owasp-modsecurity/ModSecurity#673 · Filter by author spectrumjade opened on Mar 7, 2014 · v3.1.0
  2

  

• Parse JSON embedded in ARGS and cookies (was: t:jsonDecode)

  2.x3.xnew featureRIP - libmodsecurityRIP - Type - FeatureTBF by libmodsec
  owasp-modsecurity/ModSecurity#687 · Filter by author zimmerle opened on Mar 31, 2014 · v3.1.0
  10

  

• ctl:ruleRemoveTargetById does not support the regex form ARGS:/.../ (SecRuleUpdateTargetById does)

  2.x3.xduplicateenhancementneeds decisionpr availableTBF by libmodsecwaiting for v3
  owasp-modsecurity/ModSecurity#717 · Filter by author zimmerle opened on May 6, 2014 · v3.1.0
  9

  

• [feature request] Macro expansion when counting/comparing variables

  2.x3.xenhancementneeds decisionRIP - Type - FeatureTBF by libmodsec
  owasp-modsecurity/ModSecurity#1131 · Filter by author pigelle opened on Apr 26, 2016 · v3.1.0
  8

• [feature request] operator to count number of matches from file

  3.xenhancementneeds decisionRIP - libmodsecurityRIP - Type - FeatureTBF by libmodsecwaiting for v3
  owasp-modsecurity/ModSecurity#936 · Filter by author sam-hobbs opened on Sep 26, 2015 · v3.1.0
  1

  

• New operator: Check if transformation changed input

  3.xenhancementneeds decisionRIP - Type - FeatureTBF by libmodsec
  owasp-modsecurity/ModSecurity#1293 · Filter by author dune73 opened on Dec 28, 2016 · v3.1.0
  3

• Support macro expansion on ruleRemoveTargetById/ctl

  3.xenhancementneeds decisionRIP - Type - FeatureTBF by libmodsec
  owasp-modsecurity/ModSecurity#716 · Filter by author zimmerle opened on May 6, 2014 · v3.1.0
  1

• t:htmlEntityDecode doesn't support all text entities.

  2.x3.xhelp wantedRIP - libmodsecurityTBF by libmodsec
  owasp-modsecurity/ModSecurity#1509 · Filter by author csanders-git opened on Jul 24, 2017 · v3.1.0
  1

  

• XML rule processing action

  3.xneeds decisionRIP - libmodsecurityRIP - Type - Feature
  owasp-modsecurity/ModSecurity#945 · Filter by author csanders-git opened on Oct 16, 2015 · v3.1.0
  1

  

• ctl:ruleRemoveTargetById does not support regex targets (ARGS:/.../)

  2.x3.xenhancementpr availableRIP - libmodsecurityRIP - Type - FeatureTBF by libmodsec
  owasp-modsecurity/ModSecurity#911 · Filter by author odesk2dot2by opened on Jul 14, 2015 · v3.1.0
  8

  

• Support ipv6 in the SecGeoLookupDb

  2.x3.xenhancementneeds decisionRIP - Type - Feature
  owasp-modsecurity/ModSecurity#731 · Filter by author zimmerle opened on Jun 2, 2014 · v3.1.0
  1

  

• sanitiseMatchedBytes range does not work on POST arguments

  2.x3.xbugenhancement
  owasp-modsecurity/ModSecurity#841 · Filter by author tunetheweb opened on Feb 17, 2015 · v3.1.0
  3

• Add support for santization of arguments within the error log

  2.xenhancementRIP - libmodsecurityRIP - Type - FeatureTBF by libmodsec
  owasp-modsecurity/ModSecurity#1132 · Filter by author csanders-git opened on Apr 26, 2016 · v3.1.0
  2

• Additional collection backends for libmodsecurity (Redis, Memcached)

  3.xhelp wantedlibmodsec - missing featuresneeds decisionRIP - libmodsecurity
  owasp-modsecurity/ModSecurity#1139 · Filter by author zimmerle opened on May 5, 2016 · v3.1.0
  14

  

• ctl:ruleRemoveTargetByTag does not support regex in ModSecurity v3.x

  3.xduplicateenhancementneeds decisionpr available
  owasp-modsecurity/ModSecurity#2432 · Filter by author martinhsv opened on Oct 22, 2020 · v3.1.0
  4