Skip to content

Commit

Permalink
Adds SecRemoteRules regression tests.
Browse files Browse the repository at this point in the history
Added two test cases for SecRemoteRules. Contents are loaded from
https://www.modsecurity.org
  • Loading branch information
Felipe Zimmerle committed Nov 14, 2014
1 parent b5398ab commit 86787f2
Showing 1 changed file with 43 additions and 0 deletions.
43 changes: 43 additions & 0 deletions tests/regression/misc/40-secRemoteRules.py
Original file line number Diff line number Diff line change
@@ -0,0 +1,43 @@
### SecRemoteRules

{
type => "misc",
comment => "SecRemoteRules load",
conf => qq(
SecRuleEngine On
SecDebugLog $ENV{DEBUG_LOG}
SecDebugLogLevel 9
SecRequestBodyAccess On
SecRemoteRules 123 "https://www.modsecurity.org/modsecurity-regression-test-secremoterules.txt"
),
match_log => {
error => [ qr/ModSecurity: Loaded 1 rule/, 1],
},
},
{
type => "misc",
comment => "SecRemoteRules apply some remote rules",
conf => qq(
SecRuleEngine On
SecDebugLog $ENV{DEBUG_LOG}
SecDebugLogLevel 9
SecRequestBodyAccess On
SecRemoteRules 123 "https://www.modsecurity.org/modsecurity-regression-test-secremoterules.txt"
),
match_log => {
error => [ qr/ModSecurity: Warning. Matched phrase \"127.0.0.1\" at REQUEST_FILENAME./, 1],
debug => [ qr/Matched phrase \"127.0.0.1\" at REQUEST_FILENAME/, 1 ],
},
match_response => {
status => qr/^404$/,
},
request => new HTTP::Request(
POST => "http://$ENV{SERVER_NAME}:$ENV{SERVER_PORT}/127.0.0.1.html",
[
"Content-Type" => "application/x-www-form-urlencoded",
],
# Args
"some_variable=-1' and 1=1 union/* foo */select load_file('/etc/passwd')--"
),
},

0 comments on commit 86787f2

Please sign in to comment.