SecArgumentsLimit Equivalent for XML Processing

Srikanth Arunachalam via mod-security-users <[email protected]> Thu, 23 Dec 2021 16:43:56 +0000
Newsgroups gmane.comp.apache.mod-security.user
Message-ID <CAN6NSF95JAdncVChuskQ57=5rZcTNGVCc0o9HVfCJ-HmQO_YAw@mail.gmail.com>
Hi

We have a not very large XML payload (3mb) with tags including
multiple entries separated with comma.

    When I remove the comma separation the WAF process takes about 14sec to
complete.
When I include the comma separation lists in XML tag, it complex in 29
seconds.

Had this been a json payload, I would have used SecArgumentsLimit. It has
not been effective in XML.

Any sooner suggestion/response would be appreciated.

Kind Regards
Srikanth Arunachalam

_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/