OWASP ModSec CRS Paranoia Mode Sibling 970003 - Revision history

Zino: /* 970003 : SQL Error Leakage */

2016-03-10T08:49:30Z

‎970003 : SQL Error Leakage

Dune73 at 07:18, 8 March 2016

2016-03-08T07:18:31Z

Zino: Created page with "''This page contains a proposal for a stricter rule-clone for ModSecurity CRS Paranoia Mode.'' == 970003 : SQL Error Leakage == {|- class=..."

2016-02-22T09:31:04Z

Created page with "''This page contains a proposal for a stricter rule-clone for ModSecurity CRS Paranoia Mode.'' == 970003 : SQL Error Leakage == {|- class=..."

New page

''This page contains a proposal for a stricter rule-clone for [[OWASP_ModSec_CRS_Paranoia_Mode|ModSecurity CRS Paranoia Mode]].''

== 970003 : SQL Error Leakage ==

{|- class="wikitable"
| '''Original ID (2.2.x)'''
| '''Change'''
| '''Whitelisting'''
|-
| 970003
| Triggers anomaly score directly now
| none
|}

#
# -=[ SQL Error Leakage ]=-
#
# This is a paranoid sibling to 2.2.9 Rule 970003.
# The rule now triggers the anomaly scoring instantly
# instead of just setting tx.sql_error_match.
#
SecRule RESPONSE_BODY "@pmFromFile sql-errors.data" \
"phase:response,\
id:XXXXXX,\
rev:'5',\
ver:'OWASP_CRS/3.0.0',\
pass,\
nolog,\
tag:'application-multi',\
tag:'language-multi',\
tag:'platform-multi',\
tag:'attack-information disclosure',\
setvar:tx.anomaly_score=+%{tx.critical_anomaly_score},\
t:none"

← Older revision		Revision as of 07:18, 8 March 2016
Line 33:		Line 33:
	setvar:tx.anomaly_score=+%{tx.critical_anomaly_score},\		setvar:tx.anomaly_score=+%{tx.critical_anomaly_score},\
	t:none"		t:none"
		+
		+	[[Category:OWASP ModSecurity Core Rule Set Project]]

@@ Line 4: / Line 4: @@
 {|- class="wikitable"
-  | '''Original ID (2.2.x)'''
+  | '''RuleID 2.2.x'''
   | '''Change'''
   | '''Whitelisting'''
 |-
   | 970003
   | Triggers anomaly score directly now
   | none
@@ Line 19: / Line 23: @@
    # The rule now triggers the anomaly scoring instantly
    # instead of just setting tx.sql_error_match.
+   #
    SecRule RESPONSE_BODY "@pmFromFile sql-errors.data" \