Re: [mod-security-users] My variable seems to never expire...

[Ervin H. <ai...@gm...>]

Hi logo,

On Tue, Sep 15, 2020 at 10:29:47PM +0200, logo wrote:
> > I didn't checked the logic of the rules, but after the quick view
> > I assume the expirevar has no effect (it's not implemented).
> > 
> > Btw it's documented:
> > 
> > https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual-(v2.x)#expirevar
> > 
> > "Supported on libModSecurity: TBI"
> > 
> 
> What does TBI mean?

I guess it means "To Be Implemented".

But you can check it in the source - this is the parser, as you
can see the scanned token points to the empty action:

https://github.com/SpiderLabs/ModSecurity/blob/v3/master/src/parser/seclang-parser.cc#L5027-L5028

and this action does nothing:
https://github.com/SpiderLabs/ModSecurity/blob/v3/master/src/actions/action.cc


a.