Project

General

Profile

Actions
Copy link

Feature #7313

open

transforms: have option on how to handle failure

Added by Philippe Antoine 2 months ago. Updated 2 months ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Description

Tansforms like base64, pcrexform or urldecode may somehow fail.

Current default is to passthrough
But we could have an option to these keywords to behave differently like return a NULL or 0-length buffer instead of the original one.

Actions
Copy link
 #1

Updated by Philippe Antoine 2 months ago

Passthorugh may be a good idea sometimes like dns.query; pcrexform:"\.([^\.]+\.[^\.]+)$"; to extract the top domain if it is a subdomain or just passthrough if it is not a subdomain

Actions
Copy link

Also available in: Atom PDF