owasp-modsecurity / owasp-modsecurity/ModSecurity
Santization issues when using part H
Open
@victorhora is already working on this.
Since May 20, 2017.
2.x
enhancement
TBF by libmodsec
- Dominant language
- C++
- Stars
- 9.8k
- Forks
- 1.8k
- Avg merge
- 2h 46m
- Merged PRs (30d)
- 1
Description
MODSEC-387: At one point there was another issue for this that was closed, but I can't view it anymore to find the details. The issue is that H is so much less noisy than K, and we would like to be able to use that option. The problem is that the sanitization doesn't properly run, and sensitive data ends up in the log files that we can't have there. I know that it works with K, but it would be really really nice to be able to use the H option to reduce noise.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.