Attack signatures in GET requests not detected

[cyberblackhole]

This is in reference to the issue which I created recently here .

The GET requests containing attack signatures are not detected. However the same signatures sent over POST are detected.

Im using
latest modsecurity version with owasp CRS 3.0 and my environment is setup correct.
I'm facing this issue since I pulled this commit

[cyberblackhole]

Any update?

[zimmerle]

Hi @Goron,

Sorry for the delay. The commit 96fbca4 was reverted, you should be set now.

[cyberblackhole]

Hi @zimmerle

That commit was supposed to be a fix for POST body handling #22 . However, I reverted the commit and the GET attack signatures were detected.

That means, I could expect a proper fix in near future for POST attack signatures right?

[zimmerle]

Yes, however it may take a while. Keep in mind that the Apache connector is still in beta. For Apache in production, we still recommend the 2.x family.

[cyberblackhole]

ok thanks