Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ModSec v3 verifyCC operator doesn't capture #1698

Closed
michaelgranzow-avi opened this issue Mar 8, 2018 · 1 comment
Closed

ModSec v3 verifyCC operator doesn't capture #1698

michaelgranzow-avi opened this issue Mar 8, 2018 · 1 comment
Assignees
@zimmerle
Labels
3.x Related to ModSecurity version 3.x
Milestone
v3.0.1

Comments

@michaelgranzow-avi
Copy link
Contributor

According to the reference manual (https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#verifycc) explanation of operator verifyCC: "This operator supports the "capture" action."

However, the code in VerifyCC::evaluate() never stores the matched variables in the TX collection, whether or not "capture" is in the action list of the rule.
@michaelgranzow-avi michaelgranzow-avi changed the title verifyCC operator doesn't capture ModSec v3 verifyCC operator doesn't capture Mar 8, 2018
@victorhora victorhora self-assigned this Mar 8, 2018
@zimmerle zimmerle assigned zimmerle and unassigned victorhora Mar 9, 2018
@zimmerle zimmerle added the 3.x Related to ModSecurity version 3.x label Mar 9, 2018
@zimmerle zimmerle added this to the v3.0.1 milestone Mar 9, 2018
@zimmerle
Copy link
Contributor

zimmerle commented Mar 9, 2018

Fixed at: 70ace0f. Thanks

@zimmerle zimmerle closed this as completed Mar 9, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@zimmerle zimmerle

Labels
3.x Related to ModSecurity version 3.x
Projects
None yet
Milestone
v3.0.1
Development

No branches or pull requests
3 participants
@zimmerle @victorhora @michaelgranzow-avi