|
10 | 10 | SecRequestBodyAccess On |
11 | 11 | SecDebugLog $ENV{DEBUG_LOG} |
12 | 12 | SecDebugLogLevel 9 |
13 | | - SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" \\,id:500005 |
14 | | - "phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 13 | + SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500005, \\ |
| 14 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
15 | 15 | SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500006 |
16 | | - SecRule XML "\@validateSchema $ENV{CONF_DIR}/SoapEnvelope.xsd" \\,id:500007 |
17 | | - "phase:2,deny,id:12345" |
| 16 | + SecRule XML "\@validateSchema $ENV{CONF_DIR}/SoapEnvelope.xsd" "id:500007, \\ |
| 17 | + phase:3:,deny" |
18 | 18 | ), |
19 | 19 | match_log => { |
20 | 20 | debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 1\).*Target value: "\[XML document tree\]".*Successfully validated payload against Schema/s, 1 ], |
|
59 | 59 | SecDebugLogLevel 9 |
60 | 60 | SecAuditEngine RelevantOnly |
61 | 61 | SecAuditLog "$ENV{AUDIT_LOG}" |
62 | | - SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" \\,id:500008 |
63 | | - "phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 62 | + SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500008, \\ |
| 63 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
64 | 64 | SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500009 |
65 | | - SecRule XML "\@validateSchema $ENV{CONF_DIR}/SoapEnvelope.xsd" \\,id:500010 |
66 | | - "phase:2,deny,log,auditlog,id:12345" |
| 65 | + SecRule XML "\@validateSchema $ENV{CONF_DIR}/SoapEnvelope.xsd" "id:500010 \\ |
| 66 | + phase:2,deny,log,auditlog,id:12345" |
67 | 67 | ), |
68 | 68 | match_log => { |
69 | 69 | debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 1\).*Target value: "\[XML document tree\]".*'badval' is not a valid value of the local atomic type.*Schema validation failed/s, 1 ], |
|
108 | 108 | SecDebugLogLevel 9 |
109 | 109 | SecAuditEngine RelevantOnly |
110 | 110 | SecAuditLog "$ENV{AUDIT_LOG}" |
111 | | - SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" \\,id:500011 |
112 | | - "phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 111 | + SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500011, \\ |
| 112 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
113 | 113 | SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500012 |
114 | | - SecRule XML "\@validateSchema $ENV{CONF_DIR}/SoapEnvelope.xsd" \\,id:500013 |
115 | | - "phase:2,deny,id:12345" |
| 114 | + SecRule XML "\@validateSchema $ENV{CONF_DIR}/SoapEnvelope.xsd" "id:500013 \\ |
| 115 | + phase:2,deny,id:12345" |
116 | 116 | ), |
117 | 117 | match_log => { |
118 | 118 | debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 1\).*Target value: "\[XML document tree\]".*element is not expected/s, 1 ], |
|
158 | 158 | SecDebugLogLevel 9 |
159 | 159 | SecAuditEngine RelevantOnly |
160 | 160 | SecAuditLog "$ENV{AUDIT_LOG}" |
161 | | - SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" \\,id:500014 |
162 | | - "phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 161 | + SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500014, \\ |
| 162 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
163 | 163 | SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500015 |
164 | | - SecRule XML "\@validateSchema $ENV{CONF_DIR}/SoapEnvelope.xsd" \\,id:500016 |
165 | | - "phase:2,deny,id:12345" |
| 164 | + SecRule XML "\@validateSchema $ENV{CONF_DIR}/SoapEnvelope.xsd" "id:500016, \\ |
| 165 | + phase:2,deny,id:12345" |
166 | 166 | ), |
167 | 167 | match_log => { |
168 | 168 | debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 0\).*XML parser error.*validation failed because content is not well formed/s, 1 ], |
|
208 | 208 | SecDebugLogLevel 9 |
209 | 209 | SecAuditEngine RelevantOnly |
210 | 210 | SecAuditLog "$ENV{AUDIT_LOG}" |
211 | | - SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" \\,id:500017 |
212 | | - "phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 211 | + SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500017 \\ |
| 212 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
213 | 213 | SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500018 |
214 | | - SecRule XML "\@validateSchema $ENV{CONF_DIR}/SoapEnvelope-bad.xsd" \\,id:500019 |
215 | | - "phase:2,deny,id:12345" |
| 214 | + SecRule XML "\@validateSchema $ENV{CONF_DIR}/SoapEnvelope-bad.xsd" "id:500019 \\ |
| 215 | + phase:2,deny,id:12345" |
216 | 216 | ), |
217 | 217 | match_log => { |
218 | 218 | debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 1\).*Target value: "\[XML document tree\]".*Failed to parse the XML resource.*Failed to load Schema/s, 1 ], |
|
256 | 256 | SecRequestBodyAccess On |
257 | 257 | SecDebugLog $ENV{DEBUG_LOG} |
258 | 258 | SecDebugLogLevel 9 |
259 | | - SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" \\,id:500020 |
260 | | - "phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 259 | + SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500020, \\ |
| 260 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
261 | 261 | SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500021 |
262 | | - SecRule XML "\@validateDTD $ENV{CONF_DIR}/SoapEnvelope.dtd" \\,id:500022 |
263 | | - "phase:2,deny,id:12345" |
| 262 | + SecRule XML "\@validateDTD $ENV{CONF_DIR}/SoapEnvelope.dtd" "id:500022, \\ |
| 263 | + phase:2,deny,id:12345" |
264 | 264 | ), |
265 | 265 | match_log => { |
266 | 266 | debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 1\).*Target value: "\[XML document tree\]".*Successfully validated payload against DTD/s, 1 ], |
|
299 | 299 | SecRequestBodyAccess On |
300 | 300 | SecDebugLog $ENV{DEBUG_LOG} |
301 | 301 | SecDebugLogLevel 9 |
302 | | - SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" \\,id:500023 |
303 | | - "phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 302 | + SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500023, \\ |
| 303 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
304 | 304 | SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500024 |
305 | | - SecRule XML "\@validateDTD $ENV{CONF_DIR}/SoapEnvelope.dtd" \\,id:500025 |
306 | | - "phase:2,deny,id:12345" |
| 305 | + SecRule XML "\@validateDTD $ENV{CONF_DIR}/SoapEnvelope.dtd" "id:500025, \\ |
| 306 | + phase:2,deny,id:12345" |
307 | 307 | ), |
308 | 308 | match_log => { |
309 | 309 | debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 1\).*Target value: "\[XML document tree\]".*content does not follow the DTD/s, 1 ], |
|
342 | 342 | SecRequestBodyAccess On |
343 | 343 | SecDebugLog $ENV{DEBUG_LOG} |
344 | 344 | SecDebugLogLevel 9 |
345 | | - SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" \\,id:500026 |
346 | | - "phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 345 | + SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500026, \\ |
| 346 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
347 | 347 | SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500027 |
348 | | - SecRule XML "\@validateDTD $ENV{CONF_DIR}/SoapEnvelope.dtd" \\,id:500028 |
349 | | - "phase:2,deny,id:12345" |
| 348 | + SecRule XML "\@validateDTD $ENV{CONF_DIR}/SoapEnvelope.dtd" "id:500028, \\ |
| 349 | + phase:2,deny,id:12345" |
350 | 350 | ), |
351 | 351 | match_log => { |
352 | 352 | debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 0\).*XML parser error.*validation failed because content is not well formed/s, 1 ], |
|
385 | 385 | SecRequestBodyAccess On |
386 | 386 | SecDebugLog $ENV{DEBUG_LOG} |
387 | 387 | SecDebugLogLevel 9 |
388 | | - SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" \\,id:500029 |
389 | | - "phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
| 388 | + SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500029, \\ |
| 389 | + phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML" |
390 | 390 | SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500030 |
391 | | - SecRule XML "\@validateDTD $ENV{CONF_DIR}/SoapEnvelope-bad.dtd" \\,id:500031 |
392 | | - "phase:2,deny,id:12345" |
| 391 | + SecRule XML "\@validateDTD $ENV{CONF_DIR}/SoapEnvelope-bad.dtd" "id:500031 \\ |
| 392 | + phase:2,deny,id:12345" |
393 | 393 | ), |
394 | 394 | match_log => { |
395 | 395 | debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 1\).*Target value: "\[XML document tree\]".*Failed to load DTD/s, 1 ], |
|
0 commit comments