Re: [mod-security-users] regex for matching urls

[Peter W. <prw...@gm...>]

P.S.

The mod_security reference manual is excellent. Had I bothered to
fully read the section on Path Normalization, I could have avoided
asking this question. :-)

Peter


On Mon, 07 Mar 2005 16:58:26 +0000, Ivan Ristic <iv...@we...> wrote:
> Peter Wood wrote:
> > Ivan,
> >
> > Thanks for the response. Can you suggest any way to work around this
> > so that we can match 'http://'? Would '/{2}' work, or would that also
> > be normalized?
> 
>    Normalisation is not performed against the regex, only against
>    the incoming data. In the regex just use "http:/" instead of
>    "http://" and you should be fine.
> 
> --
> Ivan Ristic
> Apache Security (O'Reilly) - http://www.apachesecurity.net
> Open source web application firewall - http://www.modsecurity.org
> 
> -------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT Products from real users.
> Discover which products truly live up to the hype. Start reading now.
> http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> 


-- 
Peter R. Wood | email: prw...@gm... | blog: http://prwdot.org/