Skip to content

Conversation

@airween
Copy link
Member

@airween airween commented Jul 30, 2025

what

This PR fixes a bug: if the host is a Windows based server, and admin wants to set any path where the directory name contains space (and the separator is the blackslash), then parser throws an error.

These characters have been added:

  • space
  • \ (backslash) (it's escaped, so this is it: \\
  • ( and ) (parenthesis) (these are also escaped)

why

The problem is described in #3429.

references

#3429

@airween
Copy link
Member Author

airween commented Jul 31, 2025

See #3429 - @skvoboo-gh tested this on Windows.

theseion
theseion previously approved these changes Aug 1, 2025
@sonarqubecloud
Copy link

sonarqubecloud bot commented Aug 1, 2025

@airween
Copy link
Member Author

airween commented Aug 1, 2025

Okay, I found the problem and fixed it. Recent changes:

  • d8574c8: I fixed the regex in the failed regression test; see previous issue
  • 013c8c2: I put back @theseion's suggestion
    • it seems like the syntax produced the same tokenizer, because I re-generated the file seclang-scanner.cc, and it's the same, no diff

@airween airween merged commit 0ac551b into owasp-modsecurity:v3/master Aug 3, 2025
50 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants