[ https://www.modsecurity.org/tracker/browse/MODSEC-38?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Breno Silva Pinto resolved MODSEC-38.
-------------------------------------
Resolution: Fixed
> The @rx and @pm parameters are not escaped before they are used in messages
> ---------------------------------------------------------------------------
>
> Key: MODSEC-38
> URL: https://www.modsecurity.org/tracker/browse/MODSEC-38
> Project: ModSecurity
> Issue Type: Bug
> Security Level: Normal
> Components: Core
> Affects Versions: 2.5.6, 2.5.7, 2.5.8, 2.5.9
> Reporter: Ivan Ristic
> Assignee: Breno Silva Pinto
> Fix For: 2.6.0
>
>
> The @rx and @pm parameters are not escaped before they are used in messages. So, for example, if a parameter to @rx is " (one double quote), the associated message will say """ (three double quotes), instead of "\"". Same for @pm.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://www.modsecurity.org/tracker/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
|