Skip to content

Conversation

@airween
Copy link
Member

@airween airween commented Nov 13, 2025

what

This PR encodes the possible binary characters from user input in audit.log.

why

Actually if the user sends a request with invalid encoding then it appears in audit.log in binary format. The problem is that not all parser can handle those binary characters.

For more details see #3463.

references

A similar issue was fixed in #2854.

Closes: #3463.

@sonarqubecloud
Copy link

@airween airween merged commit fc905d9 into owasp-modsecurity:v3/master Nov 14, 2025
50 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ModSecurity v3.0.12 audit logs contain unescaped binary data making logs invisible to kubectl and unparseable by log processors

2 participants