Re: [mod-security-users] regex for matching urls

[Ivan R. <iv...@we...>]

Peter Wood wrote:
> Greetings,

> What is wrong with '[a-z]+://' ?

   Before regular expression is applied to a piece of data
   mod_security performs data normalization and reduces
   redundant forward slashes. Thus "http://" becomes "http:/".

   (No, I don't like it either. That's why in 1.9 normalization
    will become optional and configurable per-rule.)

-- 
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org