[Mod-security-developers] [JIRA] Resolved: (MODSEC-371) ModsecurityIIS does not pass through POST data to ASP.NET when SecRequestBodyAccess is set to On

[Breno S. P. (JIRA) <no...@mo...>]

     [ https://www.modsecurity.org/tracker/browse/MODSEC-371?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Breno Silva Pinto resolved MODSEC-371.
--------------------------------------

    Fix Version/s: 2.7.2
       Resolution: Fixed

> ModsecurityIIS does not pass through POST data to ASP.NET when SecRequestBodyAccess is set to On
> ------------------------------------------------------------------------------------------------
>
>                 Key: MODSEC-371
>                 URL: https://www.modsecurity.org/tracker/browse/MODSEC-371
>             Project: ModSecurity
>          Issue Type: Bug
>      Security Level: Normal
>    Affects Versions: 2.7.1
>         Environment: Windows 2008 R2/IIS 7.5
>            Reporter: Magnus Eriksson
>            Assignee: Breno Silva Pinto
>            Priority: High
>              Labels: IIS, ModSecurityIIS
>             Fix For: 2.7.2
>
>
> ModsecurityIIS does not pass through POST data to ASP.NET when SecRequestBodyAccess is set to On. Configuration file was based on modsecurity.conf-recommended.
> This was confirmed by creating a simple page with a single textbox and button. When turning SecRequestBodyAccess to Off and submitting the form, we get 4 items in HttpContext.Current.Request.Form.AllKeys. When SecRequestBodyAccess is set to On I get 0 items in HttpContext.Current.Request.Form.AllKeys.
> There is nothing in the logs to indicate anything has been blocked. There is also nothing in the event log.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira