[ https://www.modsecurity.org/tracker/browse/MODSEC-371?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Breno Silva Pinto resolved MODSEC-371.
--------------------------------------
Fix Version/s: 2.7.2
Resolution: Fixed
> ModsecurityIIS does not pass through POST data to ASP.NET when SecRequestBodyAccess is set to On
> ------------------------------------------------------------------------------------------------
>
> Key: MODSEC-371
> URL: https://www.modsecurity.org/tracker/browse/MODSEC-371
> Project: ModSecurity
> Issue Type: Bug
> Security Level: Normal
> Affects Versions: 2.7.1
> Environment: Windows 2008 R2/IIS 7.5
> Reporter: Magnus Eriksson
> Assignee: Breno Silva Pinto
> Priority: High
> Labels: IIS, ModSecurityIIS
> Fix For: 2.7.2
>
>
> ModsecurityIIS does not pass through POST data to ASP.NET when SecRequestBodyAccess is set to On. Configuration file was based on modsecurity.conf-recommended.
> This was confirmed by creating a simple page with a single textbox and button. When turning SecRequestBodyAccess to Off and submitting the form, we get 4 items in HttpContext.Current.Request.Form.AllKeys. When SecRequestBodyAccess is set to On I get 0 items in HttpContext.Current.Request.Form.AllKeys.
> There is nothing in the logs to indicate anything has been blocked. There is also nothing in the event log.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
|
