@@ -128,7 +128,7 @@ SecRule FILES_NAMES|FILES "@rx (?<!&(?:[aAoOuUyY]uml)|&(?:[aAeEiIoOuU]circ)|&(?:
128128# by the request body processor if it encounters errors.
129129#
130130# -=[ References ]=-
131- # https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual
131+ # https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#REQBODY_ERROR
132132#
133133SecRule REQBODY_ERROR "!@eq 0" \
134134 "id:920130,\
@@ -161,7 +161,7 @@ SecRule REQBODY_ERROR "!@eq 0" \
161161# _not_ to remove it altogether.
162162#
163163# -=[ References ]=-
164- # https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual
164+ # https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#MULTIPART_STRICT_ERROR
165165#
166166SecRule MULTIPART_STRICT_ERROR "!@eq 0" \
167167 "id:920140,\
@@ -309,6 +309,7 @@ SecRule REQUEST_METHOD "@rx ^POST$" \
309309#
310310# -=[ References ]=-
311311# http://www.bad-behavior.ioerror.us/about/
312+ # https://tools.ietf.org/html/rfc7233
312313#
313314# 2. Per RFC 2616 -
314315# "If the last-byte-pos value is present, it MUST be greater than or equal to the first-byte-pos in that byte-range-spec,
@@ -353,6 +354,7 @@ SecRule REQUEST_HEADERS:Range|REQUEST_HEADERS:Request-Range "@rx (\d+)\-(\d+)\,"
353354#
354355# -=[ References ]=-
355356# http://www.bad-behavior.ioerror.us/about/
357+ # https://tools.ietf.org/html/rfc7233
356358#
357359SecRule REQUEST_HEADERS:Connection "@rx \b(?:keep-alive|close),\s?(?:keep-alive|close)\b" \
358360 "id:920210,\
@@ -383,7 +385,6 @@ SecRule REQUEST_HEADERS:Connection "@rx \b(?:keep-alive|close),\s?(?:keep-alive|
383385#
384386# -=[ References ]=-
385387# http://www.ietf.org/rfc/rfc1738.txt
386- # https://tools.ietf.org/html/rfc7233
387388#
388389SecRule REQUEST_URI "@rx \%(?:(?!$|\W)|[0-9a-fA-F]{2}|u[0-9a-fA-F]{4})" \
389390 "id:920220,\
0 commit comments