owasp-modsecurity / owasp-modsecurity/ModSecurity-nginx
Add an Option to Skip Body Inspections
Nobody has claimed this yet.
- Dominant language
- Perl
- Stars
- 1.9k
- Forks
- 312
- PR merge metrics
- No merged PRs in 30d
Description
I have a rather rare use-case, where sometimes large POST requests are made to ModSecurity protected endpoints. The sent data itself is encrypted and cannot be inspected. As ModSecurity buffers the whole requests, this leads to quite a big memory consumption, subsequently the container is killed, if it consumes too much memory.
To address this issue, we developed a patch that allows on a per-location basis to skip the body inspection, while keeping the rest of the ModSecurity checks. I'd like to open a pull request to evaluate, if that patch fits into the official source.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the ModSecurity-nginx connector's handling of request body inspection and how per-location settings are represented. Use the proposed per-location skip behavior described in the issue as the acceptance target, while preserving the other ModSecurity checks; the issue does not name files or tests to run.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- nginx
- Domain
- security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100