{"push_id":569022819,"size":53,"distinct_size":53,"ref":"refs/heads/master","head":"2e09b8e542bb877f4849881c101a9e57f8595323","before":"a0f91de416095cf5c5333c1be70e4881ba2a2ad2","commits":[{"sha":"accb1820e058dc97c666c384afa697a906d372ec","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"Adds collection FILES_TMP_CONTENT\n\nThe collection is filled with a key-value set where value is the content of\nthe file which was uploaded. This collection can be used with all supported\noperators, however SecUploadKeepFiles should be set to 'On' in order\nto have this collection filled.","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/accb1820e058dc97c666c384afa697a906d372ec"},{"sha":"873c628b1ab8061eb4fdfa61c0c96aaed726ff3a","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"Adds ssdeep support in our build system\n\nssdeep will be used with the @fuzzyHash operator which is under\ndevelopment","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/873c628b1ab8061eb4fdfa61c0c96aaed726ff3a"},{"sha":"96865a92d39f5d9fe9cad38d029e7d35a5dcf286","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"Adds fuzzyHash operator\n\nThe fuzzyHash operator can be used to match files. In conjuntcion\nwith FILES_TMP_CONTENT collection it can scan uploaded files and\ntry to match it with a pre caculated list of know malicious content,\nmore details on how it works can be found on ssdeep website:\nhttp://ssdeep.sourceforge.net/","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/96865a92d39f5d9fe9cad38d029e7d35a5dcf286"},{"sha":"7affec82a897cfbe49ae90a42dd8693b2c3db3f9","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe \\\"Zimmerle\\\" Costa"},"message":"iis: Adds ssdeep support","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/7affec82a897cfbe49ae90a42dd8693b2c3db3f9"},{"sha":"fa0c97ea7bac0c15f79cace6be18d244164c131d","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"Adds regression test to cover the @fuzzeHash operator\n\nAdded 30-fuzzyHash.t and the ssdeep hash files. Hash files was generated using\nfiles from ModSecurity repository.","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/fa0c97ea7bac0c15f79cace6be18d244164c131d"},{"sha":"a45fe95ed59cd4c46b10a8ebdcb2e4e98d7083e6","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"FuzzyHash: if disable giving an run time error instead of config\n\nFuzzyHash operator is optional and only installed if the headers for libfuzzy\nwas found in the system. Otherwise, the FuzzyHash operator is disable during\nthe compilation. After this commit, if some rules tries to use it, ModSecurity\nwill produce an runtime error not a config time error, allowing the web server\nto procede normal with its operations.","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/a45fe95ed59cd4c46b10a8ebdcb2e4e98d7083e6"},{"sha":"de1c028d12cff45b31cb9de44f434cb9a6dec4a9","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"Declares msre_var *rvar at the beggining of the function\n\nNecessary to fix the build on Win8 VS 2011","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/de1c028d12cff45b31cb9de44f434cb9a6dec4a9"},{"sha":"c64a681c65659aa822b3ba772691de786de9bf8e","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"Temporarily disable a test that is leading nginx buildbot to fail.","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/c64a681c65659aa822b3ba772691de786de9bf8e"},{"sha":"11ede79bc5d1526307a58a7f3e8c7162a4a230d9","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"Adds automake subdir-objects option\n\nAs of Automake 1.4, it starts to warning about the lack of utilization\nof `subdir-objects' option, which will be default in the further\nreleases. Avoiding break stuff we are patching ModSecurity to support\nsuch option when it still an option (Issue #760).","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/11ede79bc5d1526307a58a7f3e8c7162a4a230d9"},{"sha":"f2b45bfafaddfaaf4c988ecafaed4a4c51d8e3d1","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"Automake: Using ../ instead of $(top_srcdir)\n\nAfter enable `subdir-objects', the variable $(top_srcdir) was not being\nresolved, a directory labeled \"$(top_srcdir)\" was created instead.","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/f2b45bfafaddfaaf4c988ecafaed4a4c51d8e3d1"},{"sha":"66bb840a5dbcec0fbd7200d416ffbe7289f4ce54","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"Adds doxygen configuration files","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/66bb840a5dbcec0fbd7200d416ffbe7289f4ce54"},{"sha":"d554b94d1e9e3bf4945a724e5ac2b8a570f4e0f2","author":{"email":"846ad5aca436d2ec31bead092e1faf4e73a4585f@geeklair.net","name":"Daniel J. Luke"},"message":"Include apr-util's LDFLAGS\n\nUsing apr-util installed by Macports results in build failure because apr-util uses BerkeleyDB that MacPorts installs into a subdir of $prefix/lib and $prefix/include (so that multiple versions of BerkeleyDB can be installed simultaneously). apu-1-config's --ldflags output includes the -L/path/to/bdb that's needed.","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/d554b94d1e9e3bf4945a724e5ac2b8a570f4e0f2"},{"sha":"54bf71f8bdc3b2384627dcb68713e56083c4294e","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"mlogc: Changes the default SSL algo to TLS 1.2\n\nAs reported by Josh Amishav-Zlatin, mlogc was making usage of SSLv3 instead of\nTLS 1.2. Servers should not answer SSLv3 after poodle.","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/54bf71f8bdc3b2384627dcb68713e56083c4294e"},{"sha":"2615a5dfc89d6f430840d06cad4540c76b5bc3de","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"mlogc: Checks if curl supports CURL_SSLVERSION_TLSv1_2 before use it\n\nSeems like curl versions older than 7.34.0 does not have support for\n`CURL_SSLVERSION_TLSv1_2'. In this cases, using CURL_SSLVERSION_TLSv1\nwhich was added at version 7.9.2. ModSecurity demands a curl version\nnewer than 7.15.1.","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/2615a5dfc89d6f430840d06cad4540c76b5bc3de"},{"sha":"cee205b109f33dcaa887075def9f48117e0f75b1","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"Adds Status test case with the SecServerSignature being used\n\nIf SecServerSignature is used ModSecurity should send the real data, not the\none informed to SecServerSignature.\nOriginally reported by: Linas","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/cee205b109f33dcaa887075def9f48117e0f75b1"},{"sha":"8305600d50717ff4b875ad109bf4feb335f6aae9","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"Trims long `apache version' in the status call\n\nAs reported at #714 status calls with long `apache version' name was broken.\nDNS queries cannot be so long. This field is now limited to 25 characters\nwhich is a valid size when encoded into base32","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/8305600d50717ff4b875ad109bf4feb335f6aae9"},{"sha":"59a1746be799d846e7c7d374efc7f5f09ab97ce5","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"Using real server signature on status call\n\nOn Apache platform the server signature can be replaced using the\nSecServerSignature directive. Status call was using the signature informed by\nthis directive instead of using the original one. As reported at #702.","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/59a1746be799d846e7c7d374efc7f5f09ab97ce5"},{"sha":"288fedfd226ddcc40c5821dfaff098e191efdae7","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"Adds real_server_signature symbol to msc_test\n\nMissing symbol was leading the tests to fail","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/288fedfd226ddcc40c5821dfaff098e191efdae7"},{"sha":"f45c6fe874fc33e4df573ef5c0b96ca4c99f0447","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"Build: fix the build script that looks for yajl\n\nThe script was looking for the wrong header file. Instead of look for\nyajl_parse.h it was looking for yajl.h. Originally reported by\n@rpfilomeno at #804.","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/f45c6fe874fc33e4df573ef5c0b96ca4c99f0447"},{"sha":"81bde0842ddca765b85434e82a64fd6730860187","author":{"email":"b06f5b5040d2559d48daef0f134322ceb33903e3@trustwave.com","name":"Felipe Zimmerle"},"message":"Adds curl support to main core\n\nCurl was used only by mlogc, as we want to expand ModSecurity to load\nexternal rules/resources it is now a dependency of the core as well.","distinct":true,"url":"https://api.github.com/repos/micha137/ModSecurity/commits/81bde0842ddca765b85434e82a64fd6730860187"}]}