Project

General

Profile

Actions

Bug #362

closed

HTTP URI query string normalized to lowercase

Added by Victor Julien about 13 years ago. Updated about 13 years ago.

Status:
Closed
Priority:
High
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

The query string part of the HTTP URI is normalized to lowercase. This causes case sensitive matching to fail resulting in false negatives.

Actions #1

Updated by Victor Julien about 13 years ago

It seems this is an issue only for the IDS personality libhtp provides. This the default personality Suricata uses. Adding an override.

Actions #2

Updated by Victor Julien about 13 years ago

  • Status changed from Assigned to Closed
  • % Done changed from 0 to 100

Fix committed.

Actions

Also available in: Atom PDF