owasp-modsecurity / owasp-modsecurity/ModSecurity

SecRuleUpdateActionById directive with a range

Open
#3,297 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

3.x
Dominant language
C++
Stars
9.8k
Forks
1.8k
Avg merge
2h 46m
Merged PRs (30d)
1

Description

How to use SecRuleUpdateActionById directive to change action of multi rule id ?
When i use
SecRuleUpdateActionById 70050015 "pass"
-> It's work

But
SecRuleUpdateActionById 70050014-70050016 "pass"
-> Not work

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the behavior with SecRuleUpdateActionById using a single rule ID and then the 70050014-70050016 range. Trace the directive's handling of those inputs and add coverage showing that the action is updated for every rule in the range.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.