question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Missing transformation?

See original GitHub issue

_Issue originally created by user csanders-git on date 2017-03-28 21:23:21. Link to original issue: https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/719._

csjperon brought this issue up… it seems like it might be missing a needed transform

  "msg:'Unicode Full/Half Width Abuse Attack Attempt',\
   id:920260,\
   severity:'WARNING',\
   rev:'2',\
   ver:'OWASP_CRS/3.0.0',\
   maturity:'6',\
   accuracy:'8',\
   phase:request,\
   t:none,\
   tag:'application-multi',\
   tag:'language-multi',\
   tag:'platform-iis',\
   tag:'platform-windows',\
   tag:'attack-protocol',\
   block,\
   setvar:'tx.msg=%{rule.msg}',\
   setvar:tx.anomaly_score=+%{tx.warning_anomaly_score},\
   setvar:tx.%{rule.id}-OWASP_CRS/PROTOCOL_VIOLATION/EVASION-%{matched_var_name}=%{matched_var}"

utftounicode outputs %uXXXX encoding - do we want to use utftounicode transformation here?

I think in fact this is a major oversight? Thoughts dune73 zimmerle

Issue Analytics

  • State:closed
  • Created 3 years ago
  • Comments:14

github_iconTop GitHub Comments

1reaction
CRS-migration-botcommented, May 13, 2020

User dune73 commented on date 2017-04-04 06:23:34:

Assigning this to csanders-git as per last night’s chat session.

0reactions
CRS-migration-botcommented, May 13, 2020

User dune73 commented on date 2017-04-27 14:33:52:

Good plan.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Machine Learning — Missing Data and Data Transformation #6
In this article, we will examine missing data analysis and data transformation methods. Missing Data Analysis. What is Missing Data? It refers ...
Read more >
Get & Transform missing - Excel - Microsoft Tech Community
Hi All, Get & Transform (Obtenir & transformation in french) is missing in my toolbar. I can't load data from an existing table...
Read more >
Transformation Warning: What Does It Mean and What Should ...
When a transformation is missing, ArcGIS Pro chooses an approximate display, which can result in features from different layers being ...
Read more >
InfoObjects Missing In Transformation or InfoProvider Data ...
An infoobject is not visible in the transformation display or InfoProvider Data Model in an Advanced DSO, and cannot be mapped.
Read more >
Predict Missing Values Transformation: Fill ... - Salesforce Help
In Salesforce Data Pipelines, use the Predict Missing Values transformation in a Data Prep recipe to complete your data by filling in missing...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found