[mod-security-users] SEARCH /\x90\x.......

[Brent C. <bc...@ec...>]

Hi all

This morning I saw this in my apache logs (Im quite surprised the confs from gotroot.com and modsecurity.org didnt address this).

59.187.253.214 - - [08/Jun/2006:08:20:26 +0200] "SEARCH /\x90\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x

Would anyone please advise me on how I can stop this type of string.

I thought would be ok

SecFilterSelective ARG_highlight \x90\x04H\x04H

Kind Regards

Brent Clark

P.s. How would a person test a SEARCH request, dont think a copy and paste in a browser will do the job.