Re: [mod-security-users] Regex in a Variable?

[Josh Amishav-Z. <ja...@ow...>]

On Fri, Nov 1, 2013 at 5:23 PM, Macks, Aaron <am...@ha...>wrote:

>  I've got a bunch of rule-exceptions that need to allow multiple
> problematic-looking but valid arguments (or cookies).  The naive way to do
> that is:
> !ARGS:/^addresses/|!ARGS:items|!ARGS:shippingInfo
> I tried putting that as a single rule REGEX:
> !ARGS:/^(addresses|items|:shippingInfo)/
> but it parsed the pipe as "next variable" and threw some errors*.  Is
> there a way to quote a regex in that section of config, or do i need to do
> it the naive way?
>
>
Hi Aaron,

You could use single quotes around your regex, e.g.:

SecRuleUpdateTargetById 12345 !ARGS:'/^(addresses|items|shippingInfo)$/'

--
 - Josh