[mod-security-users] Feature Requests (was: Re: Release of remo 0.1.3)

[Christian F. <chr...@ti...>]

On Thu, Mar 15, 2007 at 02:09:55PM +0000, Ivan Ristic wrote:
> >I have one or two feature requests for Mod. Should I post them to the
> >list or to you in a private message?
> 
> The list please.

So here we go. I have two feature requests.

- Seperate collections for query string parameters and post payload
  arguments.
  ARGS is a handy collection, but for a whitelist policy, I want to be 
  exact and right now I have to do a special hack with every post
  parameter to make sure it is not submitted as query string argument 
  (and vice-versa).  Seperate collections simplify my rulesets.
- Regex ranges in selection operator
  While ARGS:/^uid_\d$/ works as selector ARGS:/^uid_\d{1,5}$/ does not.
  In fact I get the following during restart.
	  Error creating rule: Unknown variable: 5}$/
	  (ModSecurity 2.1.0)
  It would be very cool if this would syntax would work.


Otherwise, after two months of remo, I am very much pleased with the 
possibilities of the ModSecurity rules language.

regards,

Christian

-- 
chr...@ne...          -        http://www.netnea.com