owasp-modsecurity / owasp-modsecurity/ModSecurity
Redirect action does not work properly in IIS
Open
@victorhora is already working on this.
Since May 5, 2017.
Platform - IIS
- Dominant language
- C++
- Stars
- 9.8k
- Forks
- 1.8k
- Avg merge
- 2h 46m
- Merged PRs (30d)
- 1
Description
I'm using IIS 7.5 with ModSecurity 2.8.0.
I've created a simple configuration file with only one rule
SecRule ARGS "foo" "id:99999,pass,redirect:/"
These are the request headers I get when firing the rule:
HTTP/1.1 302 ModSecurity Action
Server: Microsoft-IIS/7.5
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
Date: Tue, 27 May 2014 15:08:05 GMT
Content-Length: 0
X-XSS-Protection and X-Frame-Options are added by my IIS configuration. Problem is with Location header that is not present so redirect is not working.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.