Re: [mod-security-users] request body: Multipart: invalid boundary encountered

[peter p. <pi...@go...>]

Ivan Ristic wrote:
> 
> The quickest solution for you is to change the encoding used to submit
> the form.
 >

thnx a lot for your answer. I would prefer a different solution, cause 
some applications require  file-upload and the problem will pop up there 
again. Unfortunately one of our partners is based on old macs, so I cant 
avoid/ignore the problem.


> 
> The message you get means ModSecurity believes the request body is
> invalid. Seing the User-Agent (Mozilla/4.0 (compatible; MSIE 5.0;
> Mac_PowerPC) I would say this is probably true. ModSecurity 1.9.x does
> not keep invalid request bodies around so I can't be completely sure,
> I am guessing the browser is terminating lines with \n where the
> specifications requires for \r\n.
>


Based on my logs the Problem occurs with **some** MSIE 5.0 and MSIE 5.23 
on Power_mac. I've also entries from MSIE 5.23 on Power_Mac where the 
problem did not occur when submitting the form.

Is there a rule where I can disable this check for mod-security?  Or a 
small source-hack that allows further examination of the problem?

I dont think that mod_security is completely incompatible with MSIE 5.x 
on Apple when it comes to multipart-encoding !?


thnx,
peter

> --
> Ivan Ristic, Technical Director
> Thinking Stone, http://www.thinkingstone.com
> ModSecurity: Open source Web Application Firewall
> 


-- 
mag. peter pilsl
goldfisch.at
IT- & dataconsulting
tel: +43 650 3574035
tel: +43 1 8900602
fax: +43 1 8900602 15
pi...@go...