owasp-modsecurity / owasp-modsecurity/ModSecurity
Best solution/workaround sanitise modsecurity v3
Open
@airween is already working on this.
Since May 31, 2024.
3.x
duplicate
libmodsec - missing features
- Dominant language
- C++
- Stars
- 9.8k
- Forks
- 1.8k
- Avg merge
- 2h 46m
- Merged PRs (30d)
- 1
Description
** Description of the bug **
On modsecurity v3 and OWASP CRS 4.x there are a lot of password rule matching and we notice the password printed into the modsecurity audit logs. We also noticed that sanitiseArg is not supported on v3 branch.
Do you plan to support in the near future this important function?
Do you aware of a better method than removing the printed part of values via SecAuditLogParts?
The found some issue related to the sanitise implementation on v3 branch like:
#1132
#1898
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.