Re: Re[3]: [mod-security-users] escape character problem - mod_security v1.9.2

[Ivan R. <iva...@gm...>]

On 5/19/06, gyo...@hi... <gyo...@hi...> wrote:
> Thank Ivan.
>
> I tested this rule.
> ###
> SecFilterSelective ARG_parameter1 "\\\""
> ###
>
> It filters all messages which includes character ",

Ah, sorry, my mistake. We want to use:

SecFilterSelective ARG_parameter1 "\\\\\""

After Apache is done with the parameter (regex pattern) it will
convert "\\\\\"" to \\", which is what you want (since \ is used to
escape characters in regex patterns too).

--=20
Ivan Ristic, Technical Director
Thinking Stone, http://www.thinkingstone.com
ModSecurity: Open source Web Application Firewall