Skip to content

Implement support to the RESOURCE variable in libmodsecurity #1014

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
zimmerle opened this issue Dec 9, 2015 · 2 comments
Closed

Implement support to the RESOURCE variable in libmodsecurity #1014

zimmerle opened this issue Dec 9, 2015 · 2 comments

Comments

@zimmerle
Copy link
Contributor

zimmerle commented Dec 9, 2015

The variable RESOURCE needs to be implemented inside libModSecurity:

More information about this variable can be found at ModSecurity reference manual: https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual

@victorhora
Copy link
Contributor

Hey @zimmerle I'm wondering if this one is meant to be for the RESOURCE collection or for a possibly undocumented RESOURCE variable?

Because if I'm not mistaken the collection seems to be already working as you can use the following set of rules to initialize a resource collection:

SecRule ARGS:resource "@unconditionalmatch " "phase:2,pass,initcol:resource=%{ARGS.resource},id:900003"
SecRule ARGS:resource "@unconditionalmatch " "phase:2,pass,expirevar:resource.timeout=3600,id:9000033"

So if this is true, we should change this milestone to something like setrsc action is implemented? :)

@zimmerle zimmerle self-assigned this Jun 9, 2017
@zimmerle
Copy link
Contributor Author

Fully implemented as of: 9369efc

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants