SpiderLabs / owasp-modsecurity-crs

OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
https://modsecurity.org/crs
Apache License 2.0
2.44k stars 725 forks source link

Fix 921120 FP #1746

Closed franbuehler closed 1 month ago

franbuehler commented 4 years ago

This PR solves issue #1615. The request headers must now be followed by optional space characters and at least one word character. In reality, other request header values than word chars are allowed, but we don't want to match the whole request header in this rule. We just want to be sure that at least one word char follows the request header. I thought this is enough.