Question about ARGS Variable

Jai Harpalani via mod-security-users <[email protected]>
Newsgroups gmane.comp.apache.mod-security.user
Message-ID <CANExQKv64SKzhBsj2QwaE+66k7nTkZW3dp02OWoPGubTtw7=_g@mail.gmail.com>
User-documentation states:

"ARGS is a collection and can be used on its own (means all arguments
including the POST Payload)..."

Based on my testing, it does not appear that ARGS is including the POST
payload. I am sending a POST request with the body shown below. I expect it
to trigger Rule 930120, but it does not.

Request Body:

<?xml version='1.0' encoding='UTF-8'?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
     <soapenv:Body>
          <ns1:echo xmlns:ns1="http://example1.org/example1">
                <Text>hello .bashrc</Text>
          </ns1:echo>
     </soapenv:Body>
</soapenv:Envelope>

_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.