search

SpiderLabs / owasp-modsecurity-crs

OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
https://modsecurity.org/crs
Apache License 2.0
2.45k stars 726 forks source link

Rule 920190 should work with a single range (TBC) #1660

Closed fgsch closed 4 years ago

fgsch commented 4 years ago

As mentioned on slack by @dune73:

Rule 920190 only works when there is a comma in the Range header. Thus more than one pair.

We should verify that it works as expected.

fgsch commented 4 years ago

Also, the comment in that rule seems to be stale. We should update it to match what the rule is doing.