|
169 | 169 | phase:2,deny,id:12345"
|
170 | 170 | ),
|
171 | 171 | match_log => {
|
172 |
| -debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 0\).*XML parser error.*validation failed because content is not well formed/s, 1 ], |
173 |
| --debug => [ qr/Failed to load|Successfully validated/, 1 ], |
174 |
| --error => [ qr/Failed to load|Successfully validated/, 1 ], |
175 |
| -audit => [ qr/^Message: .*Failed parsing document.*\nMessage:/m, 1 ], |
| 172 | +debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 0\).*XML parser error: XML: Failed to parse document./s, 1 ], |
| 173 | +debug => [ qr/XML parser error: XML: Failed to parse document./, 1 ], |
| 174 | +error => [ qr/XML parser error: XML: Failed to parse document./, 1 ], |
| 175 | +audit => [ qr/XML parser error: XML: Failed to parse document./m, 1 ], |
176 | 176 | },
|
177 | 177 | match_response => {
|
178 |
| -status => qr/^403$/, |
| 178 | +status => qr/^500$/, |
179 | 179 | },
|
180 | 180 | request => new HTTP::Request(
|
181 | 181 | POST => "http://$ENV{SERVER_NAME}:$ENV{SERVER_PORT}/test.txt",
|
|
350 | 350 | SecXmlExternalEntity On
|
351 | 351 | SecDebugLog $ENV{DEBUG_LOG}
|
352 | 352 | SecDebugLogLevel 9
|
| 353 | +SecAuditEngine RelevantOnly |
| 354 | +SecAuditLog "$ENV{AUDIT_LOG}" |
353 | 355 | SecRule REQUEST_HEADERS:Content-Type "^text/xml\$" "id:500026, \\
|
354 | 356 | phase:1,t:none,t:lowercase,nolog,pass,ctl:requestBodyProcessor=XML"
|
355 | 357 | SecRule REQBODY_PROCESSOR "!^XML\$" nolog,pass,skipAfter:12345,id:500027
|
356 | 358 | SecRule XML "\@validateDTD $ENV{CONF_DIR}/SoapEnvelope.dtd" "id:500028, \\
|
357 | 359 | phase:2,deny,id:12345"
|
358 | 360 | ),
|
359 | 361 | match_log => {
|
360 |
| -debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 0\).*XML parser error.*validation failed because content is not well formed/s, 1 ], |
361 |
| --debug => [ qr/Failed to load|Successfully validated/, 1 ], |
362 |
| --error => [ qr/Failed to load|Successfully validated/, 1 ], |
| 362 | +debug => [ qr/XML: Initialising parser.*XML: Parsing complete \(well_formed 0\).*XML parser error: XML: Failed to parse document./s, 1 ], |
| 363 | +debug => [ qr/XML parser error: XML: Failed to parse document./, 1 ], |
| 364 | +audit => [ qr/^Message: .*Failed to parse document.*\nMessage:/m, 1 ], |
363 | 365 | },
|
364 | 366 | match_response => {
|
365 |
| -status => qr/^403$/, |
| 367 | +status => qr/^500$/, |
366 | 368 | },
|
367 | 369 | request => new HTTP::Request(
|
368 | 370 | POST => "http://$ENV{SERVER_NAME}:$ENV{SERVER_PORT}/test.txt",
|
|
0 commit comments