Re: Question about ARGS Variable
Jai Harpalani via mod-security-users <[email protected]>
| Newsgroups | gmane.comp.apache.mod-security.user |
|---|---|
| Message-ID | <CANExQKvEKmj___yWzf6dAVNMYni4=PJckqSrsd1eqVmRZk3Z8w@mail.gmail.com> |
Isn't the "POST Payload" equivalent to the body? If not, what exactly is the "POST Payload"? On Wed, Jan 2, 2019 at 12:29 PM Reindl Harald <[email protected]> wrote: > > > Am 02.01.19 um 18:55 schrieb Jai Harpalani via mod-security-users: > > User-documentation states: > > > > "ARGS is a collection and can be used on its own (means all arguments > > including the POST Payload)..." > > > > Based on my testing, it does not appear that ARGS is including the POST > > payload. I am sending a POST request with the body shown below. I expect > > it to trigger Rule 930120, but it does not. > > args and body are different worlds by definition > > > > Request Body: > > > > <?xml version='1.0' encoding='UTF-8'?> > > <soapenv:Envelope xmlns:soapenv=" > http://schemas.xmlsoap.org/soap/envelope/"> > > <soapenv:Body> > > <ns1:echo xmlns:ns1="http://example1.org/example1"> > > <Text>hello .bashrc</Text> > > </ns1:echo> > > </soapenv:Body> > > </soapenv:Envelope> > > > > _______________________________________________ > mod-security-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/mod-security-users > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > http://www.modsecurity.org/projects/commercial/rules/ > http://www.modsecurity.org/projects/commercial/support/ > _______________________________________________ mod-security-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/mod-security-users Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: http://www.modsecurity.org/projects/commercial/rules/ http://www.modsecurity.org/projects/commercial/support/