search

client9 / libinjection

SQL / SQLI tokenizer parser analyzer
Other
995 stars 274 forks source link

libInjection version to use in ModSecurity #124

Closed zimmerle closed 7 years ago

zimmerle commented 7 years ago

As you may know SpiderLabs/ModSecurity uses libinjection. Due to historical reasons, ModSecurity source code contains part of the libInjection code. Therefore the updates are manual.

I am looking forward to upgrade ModSecurity's libInjection version but I am not sure which commit to use. Is there any specific commit that you recommend the utilization?

client9 commented 7 years ago

Let me tag a new version, so you can get the latest. Will do EOD.

thanks!

client9 commented 7 years ago

Hi guys / @zimmerle

I just tagged version 3.9.2

This DOES NOT contain any fixes for the recent bypasses. It's just there to tag everything before I start work on the new stuff.

You may wish to try out a build with this just to make sure it works. It's been 2.5 years since the last release.

Will update when 3.10.0 comes out.

regards,

n

client9 commented 7 years ago

Ok, got a lot in this one. I'll wait for feedback before tagging v3.10.0

You can see the tickets fixed in the new changelog

https://github.com/client9/libinjection/blob/master/CHANGELOG.md

zimmerle commented 7 years ago

Hi @client9,

Thank you :) I think you might have forgotten to push the tag to the Git Repo.

client9 commented 7 years ago

ah didn't tag since no feedback.

I'll do it now.

client9 commented 7 years ago

Oh 3.9.2 wasn't pushed. Boo.

Ok you want 3.10.0 now. Hopefully I did this correctly. I'm a git failure.

zimmerle commented 7 years ago

That is fine ;) 3.10 it is.

ModSecurity master branch is not up-to-date.

Thanks @client9.