owasp-modsecurity / owasp-modsecurity/ModSecurity

Remove code specific to Internet Explorer

Open
#3,549 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

2.x 3.x
Dominant language
C++
Stars
9.8k
Forks
1.8k
Avg merge
2h 46m
Merged PRs (30d)
1

Description

The code includes some special cases for Internet Explorer. Microsoft doesn't officially support it anymore. Users still exist, usually in legacy corporate intranet environments, but they can be considered a special case.

I propose to either

  • remove code that is specific to Internet Explorer, or
  • put it behind a compiler flag

Removing this legacy code is not simply about removing technical debt, at least one code snippet actually impacts every request, where a check need to be handled differently just because of a quirk of Internet Explorer. The removal of that code would thus benefit all users.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files, tests, or entry points are named. Start by locating the Internet Explorer-specific code and tracing the request path it affects; done means removing it or isolating it behind a compiler flag without changing supported behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
security
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.