Skip to content
This repository was archived by the owner on May 14, 2020. It is now read-only.

Commit 6bf9e93

Browse files
csanders-gitlifeforms
authored andcommitted
Updating minor incorrectness in asp.net regex
(cherry picked from commit ed9f133)
1 parent a706ce5 commit 6bf9e93

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAME
5252
setvar:tx.%{rule.id}-OWASP_CRS/WEB_ATTACK/SESSION_FIXATION-%{matched_var_name}=%{tx.0}"
5353

5454

55-
SecRule ARGS_NAMES "@rx ^(jsessionid|aspsessionid|asp.net_sessionid|phpsession|phpsessid|weblogicsession|session_id|session-id|cfid|cftoken|cfsid|jservsession|jwsession)$" \
55+
SecRule ARGS_NAMES "@rx ^(jsessionid|aspsessionid|asp\.net_sessionid|phpsession|phpsessid|weblogicsession|session_id|session-id|cfid|cftoken|cfsid|jservsession|jwsession)$" \
5656
"msg:'Possible Session Fixation Attack: SessionID Parameter Name with Off-Domain Referer',\
5757
phase:2,\
5858
rev:'2',\

0 commit comments

Comments
 (0)