Saturday, May 09, 2026 AM03:21:24 HKT
This commit is contained in:
@@ -0,0 +1,22 @@
|
||||
Libinjection is being integrated into naxsi, starting at 0.54rc0
|
||||
|
||||
* https://github.com/nbs-system/naxsi/releases/tag/0.54rc0
|
||||
|
||||
We are looking for people to test it and provide feedback on it.
|
||||
|
||||
Usage :
|
||||
|
||||
* By default, Libinjection (sql/xss) is disabled, it needs to be enabled at location level using one of these directives : LibInjectionSql / LibInjectionXss (or libinjection_sql / libinjection_xss in nginx style).
|
||||
* It can as well be dynamically enabled / disabled using :
|
||||
```
|
||||
set $naxsi_libinjection_xss 0|1;
|
||||
set $naxsi_libinjection_sql 0|1;
|
||||
```
|
||||
* When triggered, libinjection sql/xss will trigger internal rules :
|
||||
* libinjection_sql, with internal ID of 17, will increase $LIBINJECTION_SQL of 8
|
||||
* libinjection_xss, with internal ID of 18, will increase $LIBINJECTION_XSS of 8
|
||||
|
||||
* If you want to add action uppon trigger, write your CheckRules on those scores ;) (as for other rules, LOG/BLOCK/DROP is allowed!)
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user