Re: [Mod-security-developers] Macro expansion in operators

[Felipe C. <FC...@tr...>]

Hi Marc,


There is no specific reason. As there is a computational cost for macro expansion, we may have it only where/when it is extremely necessary. Do you have a specific use case?


Br.,

Felipe "Zimmerle" Costa

Security Researcher, Lead Developer ModSecurity

m: +55 81.98706.5547



[signature_480191669]

www.trustwave.com<http://www.trustwave.com/>



Recognized by industry analysts as a leader in managed security services.<https://www.trustwave.com/company/about-us/accolades/>


________________________________
From: Marc Stern <mar...@ap...>
Sent: Friday, February 1, 2019 12:16:20 PM
To: mod...@li...
Subject: [Mod-security-developers] Macro expansion in operators

Can somebody explain me why the operators below don't perform macro
expansion; they're using plain strings, not pre-calculated patterns:
  - ipMatch
  - validateByteRange

Would a pull request implementing this be accepted?

Marc Stern

_______________________________________________
mod-security-developers mailing list
mod...@li...
https://scanmail.trustwave.com/?c=4062&d=3bHU3PIPIuUQrzOmOziiUcqWOyJFIV2loAPuiTrUlA&s=5&u=https%3a%2f%2flists%2esourceforge%2enet%2flists%2flistinfo%2fmod-security-developers
ModSecurity Services from Trustwave's SpiderLabs:
https://www.trustwave.com/spiderLabs.php