920470: include chars from rfc 2046

nerrehmit · nerrehmit · commit afb57a1f7575 · 2019-09-02T15:00:05.000+02:00
RFC 2046 allows additional chars for the boundary.
\d removed as it is covered by \w in the regex. Removed unnecessary
escapes.
diff --git a/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf b/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf
@@ -867,7 +867,7 @@ SecRule &TX:COMBINED_FILE_SIZES "@eq 1" \
 # - text/plain; charset="UTF-8"
 # - multipart/form-data; boundary=----WebKitFormBoundary12345
 #
-SecRule REQUEST_HEADERS:Content-Type "!@rx ^[\w\d/\.\-\+]+(?:\s?;\s?(?:boundary|charset)\s?=\s?['\"\w\d\.\-]+)?$" \
+SecRule REQUEST_HEADERS:Content-Type "!@rx ^[\w/.\-+]+(?:\s?;\s?(?:boundary|charset)\s?=\s?['\"\w.\-()+,/:=?]+)?$" \
     "id:920470,\
     phase:1,\
     block,\

Original file line number	Diff line number	Diff line change
`@@ -867,7 +867,7 @@ SecRule &TX:COMBINED_FILE_SIZES "@eq 1" \`
`867`	`867`	`# - text/plain; charset="UTF-8"`
`868`	`868`	`# - multipart/form-data; boundary=----WebKitFormBoundary12345`
`869`	`869`	`#`
`870`		`-SecRule REQUEST_HEADERS:Content-Type "!@rx ^[\w\d/\.\-\+]+(?:\s?;\s?(?:boundary\|charset)\s?=\s?['\"\w\d\.\-]+)?$" \`
	`870`	`+SecRule REQUEST_HEADERS:Content-Type "!@rx ^[\w/.\-+]+(?:\s?;\s?(?:boundary\|charset)\s?=\s?['\"\w.\-()+,/:=?]+)?$" \`
`871`	`871`	`"id:920470,\`
`872`	`872`	`phase:1,\`
`873`	`873`	`block,\`