8000 Some rules are NOT doing IIS specific decoding of ARGS* data · Issue #3919 · coreruleset/coreruleset · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Some rules are NOT doing IIS specific decoding of ARGS* data #3919

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
azurit opened this issue Nov 2, 2024 · 0 comments
Open

Some rules are NOT doing IIS specific decoding of ARGS* data #3919

azurit opened this issue Nov 2, 2024 · 0 comments

Comments

@azurit
Copy link
Member
azurit commented Nov 2, 2024

Rules 921151, 932190, 942441, 942442 and 942460 are doing UrlDecode for ARGS* (this is done automatically by engine) but NOT UrlDecodeUni (which happens after removing UrlDecode transformation), which includes also decoding of data specific for IIS. We are not sure if we need or want it so this needs to be decided. More info can be found here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant
0