Support configurable limit on depth of JSON parsing

owasp-modsecurity · Nov 16, 2021 · ac79c1c · ac79c1c
1 parent ec86b24
commit ac79c1c
Show file tree

Hide file tree

Showing 11 changed files with 5,924 additions and 5,729 deletions.
diff --git a/CHANGES b/CHANGES
@@ -1,9 +1,8 @@
 v3.x.y - YYYY-MMM-DD (to be released)
 -------------------------------------
 
-
-
-
+  - Support configurable limit on depth of JSON parsing
+    [@theMiddleBlue, @martinhsv]
 
 v3.0.5 - 2021-Jul-07
 --------------------

diff --git a/headers/modsecurity/rules_set_properties.h b/headers/modsecurity/rules_set_properties.h
@@ -366,6 +366,7 @@ class RulesSetProperties {
                             PropertyNotSetConfigBoolean);
 
         to->m_argumentsLimit.merge(&from->m_argumentsLimit);
+        to->m_requestBodyJsonDepthLimit.merge(&from->m_requestBodyJsonDepthLimit);
         to->m_requestBodyLimit.merge(&from->m_requestBodyLimit);
         to->m_responseBodyLimit.merge(&from->m_responseBodyLimit);
 
@@ -464,6 +465,7 @@ class RulesSetProperties {
     ConfigBoolean m_tmpSaveUploadedFiles;
     ConfigBoolean m_uploadKeepFiles;
     ConfigDouble m_argumentsLimit;
+    ConfigDouble m_requestBodyJsonDepthLimit;
     ConfigDouble m_requestBodyLimit;
     ConfigDouble m_requestBodyNoFilesLimit;
     ConfigDouble m_responseBodyLimit;