[Mod-security-developers] [JIRA] Resolved: (MODSEC-38) The @rx and @pm parameters are not escaped before they are used in messages

[Breno S. P. (JIRA) <no...@mo...>]

     [ https://www.modsecurity.org/tracker/browse/MODSEC-38?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Breno Silva Pinto resolved MODSEC-38.
-------------------------------------

    Resolution: Fixed

> The @rx and @pm parameters are not escaped before they are used in messages
> ---------------------------------------------------------------------------
>
>                 Key: MODSEC-38
>                 URL: https://www.modsecurity.org/tracker/browse/MODSEC-38
>             Project: ModSecurity
>          Issue Type: Bug
>      Security Level: Normal
>          Components: Core
>    Affects Versions: 2.5.6, 2.5.7, 2.5.8, 2.5.9
>            Reporter: Ivan Ristic
>            Assignee: Breno Silva Pinto
>             Fix For: 2.6.0
>
>
> The @rx and @pm parameters are not escaped before they are used in messages. So, for example, if a parameter to @rx is " (one double quote), the associated message will say """ (three double quotes), instead of "\"". Same for @pm.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://www.modsecurity.org/tracker/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira