Hmmmm, makes sense based on my testing, but just making sure I didn't miss something. Appreciate the response. 


On Wed, Jan 16, 2013 at 3:50 PM, Breno Silva <breno.silva@gmail.com> wrote:
Yes Scott. It is required.

On Wed, Jan 16, 2013 at 6:42 PM, Scott Gerlach <sgerlach@gmail.com> wrote:
Question about SecStreamOutBodyInspection

Documentation seems to indicate that you do not need SecResponseBodyAccess On but with it turned off debug logs indicate that the rules have nothing to match against.

Is SecResponseBodyAccess required to make SecStreamOutBodyInspection/SecContentInjection work?

-Thanks
Scott

------------------------------------------------------------------------------
Master Java SE, Java EE, Eclipse, Spring, Hibernate, JavaScript, jQuery
and much more. Keep your Java skills current with LearnJavaNow -
200+ hours of step-by-step video tutorials by Java experts.
SALE $49.99 this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122612
_______________________________________________
mod-security-users mailing list
mod-security-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/