Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.
And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.
DOS counter broken for files without dots
See original GitHub issue_Issue originally created by user lifeforms on date 2016-07-30 16:12:16. Link to original issue: https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/462._
In bda2fff9, DOS rule 912150 was changed to:
SecRule REQUEST_BASENAME "\.(.*)$" \
Therefore, only filenames matching this regexp (so files containing a dot) are being counted towards the DoS limits.
DoS protection is now not functioning for file names like /, /contact etc. and you can request an unlimited number of these without triggering DoS burst detection.
Issue Analytics
- State:
- Created 3 years ago
- Comments:5
Top Results From Across the Web
Top Related Medium Post
Top Related StackOverflow Question
Troubleshoot Live Code
Top Related Reddit Thread
Top Related Hackernoon Post
Top Related Tweet
Top Related Dev.to Post
Top Related Hashnode Post
User dune73 commented on date 2016-08-02 16:49:33:
Nice find. And good fix. Thank you guys.
User csanders-git commented on date 2016-08-03 00:54:51:
Please see PR #470