wargio / naxsi

NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
GNU General Public License v3.0
305 stars 38 forks source link

Tests for #118 #120

Closed lubomudr closed 11 months ago

lubomudr commented 11 months ago

Hi

Tests and additional check for PR #118

lubomudr commented 11 months ago

Still, the question remains, what to do with requests like /bar?arg1&arg2 (without = value) NGINX does not pass them through $arg_* variables, but you can get the entire argument string through $args, $request, etc. But if you throw exception 12 (invalid request), then quite a lot will fire at once Of course, all this can be registered through a white list (and this is probably correct), but this will break many working configurations On the other hand, this will help to find not very correct queries and convey information to developers

wargio commented 11 months ago

i think those ?arg1&arg2 are ok.