]> git.ipfire.org Git - thirdparty/suricata.git/commit
http: don't decode + to space by default 620/head
authorVictor Julien <victor@inliniac.net>
Tue, 12 Nov 2013 09:25:19 +0000 (10:25 +0100)
committerVictor Julien <victor@inliniac.net>
Tue, 12 Nov 2013 09:25:19 +0000 (10:25 +0100)
commit9a7353e1487e0c7b08f71f77cf1486c24c66d6d5
tree9c8a66bb06f0dcae181614be018712b0a9f4b8cb
parent25636597afdca4581bca673b226b418ed580d1a5
http: don't decode + to space by default

Libhtp decodes the + character in the query string to a space by default.
Suricata rules (e.g. etpro sid 2806767) are expecting to see the space in
the http_uri buffer.

Added an option per htp config to reenable this default behavior:

    query-plusspace-decode: yes

Bug #1035.
src/app-layer-htp.c