23 lines
934 B
Markdown
23 lines
934 B
Markdown
Libinjection is being integrated into naxsi, starting at 0.54rc0
|
|
|
|
* https://github.com/nbs-system/naxsi/releases/tag/0.54rc0
|
|
|
|
We are looking for people to test it and provide feedback on it.
|
|
|
|
Usage :
|
|
|
|
* By default, Libinjection (sql/xss) is disabled, it needs to be enabled at location level using one of these directives : LibInjectionSql / LibInjectionXss (or libinjection_sql / libinjection_xss in nginx style).
|
|
* It can as well be dynamically enabled / disabled using :
|
|
```
|
|
set $naxsi_libinjection_xss 0|1;
|
|
set $naxsi_libinjection_sql 0|1;
|
|
```
|
|
* When triggered, libinjection sql/xss will trigger internal rules :
|
|
* libinjection_sql, with internal ID of 17, will increase $LIBINJECTION_SQL of 8
|
|
* libinjection_xss, with internal ID of 18, will increase $LIBINJECTION_XSS of 8
|
|
|
|
* If you want to add action uppon trigger, write your CheckRules on those scores ;) (as for other rules, LOG/BLOCK/DROP is allowed!)
|
|
|
|
|
|
|