Project

General

Profile

Actions
Copy link

Bug #362

closed
VJ VJ

HTTP URI query string normalized to lowercase

Bug #362: HTTP URI query string normalized to lowercase

Added by Victor Julien over 14 years ago. Updated over 14 years ago.

Status:
Closed
Priority:
High
Assignee:
Victor Julien
Target version:
1.1rc1
Affected Versions:
Effort:
Difficulty:
Label:

Description

The query string part of the HTTP URI is normalized to lowercase. This causes case sensitive matching to fail resulting in false negatives.

VJ Updated by Victor Julien over 14 years ago Actions
Copy link
 #1

It seems this is an issue only for the IDS personality libhtp provides. This the default personality Suricata uses. Adding an override.

VJ Updated by Victor Julien over 14 years ago Actions
Copy link
 #2

  • Status changed from Assigned to Closed
  • % Done changed from 0 to 100

Fix committed.

Actions
Copy link

Also available in: PDF Atom