Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.
And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.
Rule 942450 (SQL Hex Encoding Identified) too lax?
See original GitHub issue_Issue originally created by user lifeforms on date 2017-07-06 18:39:09. Link to original issue: https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/833._
Rule 942450 (SQL Hex Encoding Identified; PL2) gives FPs in alphanumeric strings that contain the substring 0x. Examples:
N0X5d1
bKjyGu1pGxza4NGsxfqxoSTPA6acPA12pshj0xddfda reported in #832
Could we be a little less annoying and not fire if there is a letter before the 0x substring? This should not diminish detecting actual attacks.
Issue Analytics
- State:
- Created 3 years ago
- Comments:8
Top Results From Across the Web
Top Related Medium Post
Top Related StackOverflow Question
Troubleshoot Live Code
Top Related Reddit Thread
Top Related Hackernoon Post
Top Related Tweet
Top Related Dev.to Post
Top Related Hashnode Post
User lifeforms commented on date 2020-04-06 15:08:18:
The great thing is that wjwoodson already fixed this in #1662, so this issue can be closed!
User dune73 commented on date 2020-03-04 08:07:57:
Decision during the CRS project chat on March 2, 2020: lifeforms will take this on.
https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1683#issuecomment-593584538