[Mod-security-developers] [JIRA] Resolved: (MODSEC-288) Redirect macro expansion does not work in SecDefaultAction when SecRule uses block action

[Breno S. P. (JIRA) <no...@mo...>]

     [ https://www.modsecurity.org/tracker/browse/MODSEC-288?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Breno Silva Pinto resolved MODSEC-288.
--------------------------------------

    Resolution: Fixed

> Redirect macro expansion does not work in SecDefaultAction when SecRule uses block action
> -----------------------------------------------------------------------------------------
>
>                 Key: MODSEC-288
>                 URL: https://www.modsecurity.org/tracker/browse/MODSEC-288
>             Project: ModSecurity
>          Issue Type: Bug
>      Security Level: Normal
>          Components: Actions
>    Affects Versions: 2.6.3
>            Reporter: Ryan Barnett
>            Assignee: Breno Silva Pinto
>             Fix For: 2.7.0
>
>
> Macro expansion in a redirect action in SecDefaultAction -
> SecDefaultAction "phase:2,log,redirect:http://www2.site.com/pm/form.asp?i=3&eID=%{unique_id}
> This does not macro expand if the SecRule that matches uses "block" action and inherits the disruptive action.  If the SecRule does not have any disruptive action specified, then the redirect macro expansion works.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira