Re: [mod-security-users] REQUEST_URI decodes URI before running checks

[Ivan R. <iv...@we...>]

Eli wrote:
> Hm, apparently my stuff does zilch!  It compiles, no segfaults, no apparent
> memory leaks so far (didn't really test much in this area though), but
> changing the "SecFilterDoURLDecoding" (which I noticed I reversed it's
> meaning!  Heheh) to On/Off doesn't seem to make a difference at all.  I have
> a feeling I'm missing something big here!

   Maybe there's code calling normalise_inplace() directly? I don't
   have the time to check right now.

   Anyway, poke around and I'm sure you'll figure it out. That's how
   I do it anyway :)

-- 
Ivan Ristic (http://www.modsecurity.org)