Project

General

Profile

Actions
Copy link

Bug #362

closed

HTTP URI query string normalized to lowercase

Added by Victor Julien over 12 years ago. Updated over 12 years ago.

Status:
Closed
Priority:
High
Assignee:
Victor Julien
Target version:
1.1rc1
Affected Versions:
Effort:
Difficulty:
Label:

Description

The query string part of the HTTP URI is normalized to lowercase. This causes case sensitive matching to fail resulting in false negatives.

Actions
Copy link
 #1

Updated by Victor Julien over 12 years ago

It seems this is an issue only for the IDS personality libhtp provides. This the default personality Suricata uses. Adding an override.

Actions
Copy link
 #2

Updated by Victor Julien over 12 years ago

  • Status changed from Assigned to Closed
  • % Done changed from 0 to 100

Fix committed.

Actions
Copy link

Also available in: Atom PDF