[Mod-security-developers] [JIRA] Resolved: (MODSEC-76) custom errorpage called behind denied 400

[Breno S. P. (JIRA) <no...@mo...>]

     [ https://www.modsecurity.org/tracker/browse/MODSEC-76?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Breno Silva Pinto resolved MODSEC-76.
-------------------------------------

    Resolution: Fixed

> custom errorpage called behind denied 400
> -----------------------------------------
>
>                 Key: MODSEC-76
>                 URL: https://www.modsecurity.org/tracker/browse/MODSEC-76
>             Project: ModSecurity
>          Issue Type: Bug
>      Security Level: Normal
>          Components: Actions
>    Affects Versions: 2.5.9
>         Environment: Fedora 10 x86_64
>            Reporter: Reindl Harald
>            Assignee: Breno Silva Pinto
>
> I am using custom-error-pages /error.php
> If somebody calls a url with ip mod_security blocks the access BUT my error.php sends me mails 
> to find broken links and i get the mails even in this case:
> Browser says: 400 Bad Request (Default Output without custom errors for 400)
> But i get an email from my error.php
> I think an from mod_security caught attack should stop the whole-request

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://www.modsecurity.org/tracker/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira