Merge pull request #1523 from lifeforms/regexp-blog-url

update regexp-assemble blog URLs

Author: lifeforms

rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf

@@ -346,7 +346,7 @@ SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAME
 # $((foo))  Arithmetic expansion
 #
 # Regexp generated from util/regexp-assemble/regexp-932130.data using Regexp::Assemble.
-# See http://blog.modsecurity.org/2007/06/optimizing-regu.html for usage.
+# See https://coreruleset.org/20190826/optimizing-regular-expressions/ for usage.
 #
 SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAMES|ARGS|XML:/* "@rx (?:\$(?:\((?:\(.*\)|.*)\)|\{.*\})|[<>]\(.*\))" \
     "id:932130,\
@@ -393,7 +393,7 @@ SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAME
 # http://ss64.com/nt/for.html
 #
 # Regexp generated from util/regexp-assemble/regexp-932140.data using Regexp::Assemble.
-# See http://blog.modsecurity.org/2007/06/optimizing-regu.html for usage.
+# See https://coreruleset.org/20190826/optimizing-regular-expressions/ for usage.
 #
 SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAMES|ARGS|XML:/* "@rx \b(?:if(?:/i)?(?: not)?(?: exist\b| defined\b| errorlevel\b| cmdextversion\b|(?: |\().*(?:\bgeq\b|\bequ\b|\bneq\b|\bleq\b|\bgtr\b|\blss\b|==))|for(?:/[dflr].*)? %+[^ ]+ in\(.*\)\s?do)" \
     "id:932140,\

rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf

@@ -323,7 +323,8 @@ SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|REQUEST_F
 # [ SAP CRM Java vulnerability CVE-2018-2380 - Exploit tested: https://www.exploit-db.com/exploits/44292 ]
 #
 # Regexp generated from util/regexp-assemble/regexp-933160.data using Regexp::Assemble.
-# See http://blog.modsecurity.org/2007/06/optimizing-regu.html for usage.
+# See https://coreruleset.org/20190826/optimizing-regular-expressions/ for usage.
+#
 # Note that after assemble, PHP function syntax pre/postfix is added to the Regexp::Assemble
 # output. Example: "@rx (?i)\bASSEMBLE_OUTPUT_HERE(?:\s|/\*.*\*/|//.*|#.*)*\(.*\)"
 #
@@ -622,7 +623,8 @@ SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAME
 # [ SAP CRM Java vulnerability CVE-2018-2380 - Exploit tested: https://www.exploit-db.com/exploits/44292 ]
 #
 # Regexp generated from util/regexp-assemble/regexp-933161.data using Regexp::Assemble.
-# See http://blog.modsecurity.org/2007/06/optimizing-regu.html for usage.
+# See https://coreruleset.org/20190826/optimizing-regular-expressions/ for usage.
+#
 # Note that after assemble, PHP function syntax pre/postfix is added to the Regexp::Assemble
 # output. Example: "@rx (?i)\bASSEMBLE_OUTPUT_HERE(?:\s|/\*.*\*/|//.*|#.*)*\(.*\)"
 #

rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf

@@ -43,7 +43,7 @@ SecRule TX:EXECUTING_PARANOIA_LEVEL "@lt 1" "id:934012,phase:2,pass,nolog,skipAf
 # use multiMatch and t:base64decode.
 #
 # Regexp generated from util/regexp-assemble/regexp-934100.data using Regexp::Assemble.
-# See http://blog.modsecurity.org/2007/06/optimizing-regu.html for usage.
+# See https://coreruleset.org/20190826/optimizing-regular-expressions/ for usage.
 
 SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAMES|ARGS|XML:/* "@rx (?:(?:_(?:\$\$ND_FUNC\$\$_|_js_function)|(?:new\s+Function|\beval)\s*\(|String\s*\.\s*fromCharCode|function\s*\(\s*\)\s*{|this\.constructor)|module\.exports\s*=)" \
     "id:934100,\

util/regexp-assemble/regexp-assemble-v2.pl

@@ -6,7 +6,7 @@
 # Requires Regexp::Assemble Perl module.
 # To install: cpan install Regexp::Assemble
 #
-# See: http://blog.modsecurity.org/2007/06/optimizing-regu.html
+# See: https://coreruleset.org/20190826/optimizing-regular-expressions/
 #
 
 use strict;

util/regexp-assemble/regexp-assemble.pl

@@ -6,15 +6,15 @@
 # Requires Regexp::Assemble Perl module.
 # To install: cpan install Regexp::Assemble
 #
-# See: http://blog.modsecurity.org/2007/06/optimizing-regu.html
+# See: https://coreruleset.org/20190826/optimizing-regular-expressions/
 #
 
 use strict;
 use Regexp::Assemble;
- 
+
 my $ra = Regexp::Assemble->new;
 while (<>)
 {
   $ra->add($_);
 }
-print $ra->as_string() . "\n"; 
+print $ra->as_string() . "\n";