|
ID
|
GID21
|
|
Revision
|
2
|
|
Name
|
ChunkedEncoding
|
|
Type
|
requestHeader
|
|
Pattern
|
^Transfer-Encoding: {0,}chunked$
|
|
Condition
|
match
|
|
Case Sensitive
|
no
|
|
Log
|
yes
|
|
Action
|
block
|
|
Command
|
%req%
|
|
Description
|
Triggers when a chunked HTTP request is detected. Normally, chunked encoding is not used by HTTP clients and there are some known security holes and exploits in the implementation of chunked encoding on web servers. ( anomaly )
|
|
Credit
|
Kanatoko
|
|
Signature
|
|