added modsecurity_disable_error_log test cases

Signed-off-by: Fatih USTA <[email protected]>

Author: fatihusta

.github/nginx/nginx.conf

@@ -74,5 +74,18 @@ http {
         }
     }
 
+    server {
+        listen          80;
+        server_name     modsecurity_disable_error_log;
+
+        modsecurity on;
+        modsecurity_disable_error_log on;
+        modsecurity_rules_file /home/runner/work/ModSecurity-nginx/ModSecurity-nginx/ModSecurity-nginx/.github/nginx/modsecurity.conf;
+        root  /usr/local/nginx/html/;
+
+        location / {
+            try_files $uri /index.html;
+        }
+    }
 }
 

.github/workflows/test.yml

@@ -140,6 +140,28 @@ jobs:
             echo "FAIL"
             exit 1
           fi
+      - name: Check attack log vhost 2 (modsecurity_disable_error_log off(default))
+        run: |
+          if ( grep -q "modsectest2" /usr/local/nginx/logs/error.log ); then
+            echo "OK"
+          else
+            echo "FAIL"
+            exit 1
+          fi
+      - name: Check attack log vhost 3 (modsecurity_disable_error_log on)
+        run: |
+          status=$(curl -sSo /dev/null -w %{http_code} -I -X GET -H "Host: modsecurity_disable_error_log" "http://localhost/?q=attack")
+          if [ "${status}" == "403" ]; then
+            if ( grep -q "modsecurity_disable_error_log" /usr/local/nginx/logs/error.log ); then
+              echo "FAIL"
+              exit 1
+            else
+              echo "OK"
+            fi
+          else
+            echo "FAIL"
+            exit 1
+          fi
       - name: Start Nginx with redir
         run: |
           sudo killall nginx
@@ -320,4 +342,4 @@ jobs:
           md temp
           set TEMP=temp
           set TEST_NGINX_BINARY=..\objs\nginx.exe
-          prove modsecurity*.t
+          prove modsecurity*.t