ScallyWhack/Rules/420011

Rule 420011: don't allow empty ticket description

Purpose

Prevents new tickets with no description being created.

Checks that description form parameter is not empty.

Example

--22e90575-A--
[07/May/2007:14:47:07 +0200] sus0A6wQKoYAABfmfpUAAAAQ XX.XX.XX.XX 34679 217.24.1.134 80
--22e90575-B--
POST /simpleticket HTTP/1.1
Via: 1.1 ISA-IWSS
Cookie: trac_form_token=34ca38b7ed19329a1d5337a3; trac_session=1b006e3c81e14a731225d97e
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)
Host: madwifi.org
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword, application/x-shockwave-flash, */*
Referer: http://madwifi.org/simpleticket
Accept-Language: en-us
UA-CPU: x86
Pragma: no-cache
Connection: Keep-Alive
Content-Length: 306

--22e90575-C--
__FORM_TOKEN=34ca38b7ed19329a1d5337a3&reporter=someone@domain.tld&summary=error+in+building+the+driver&type=defect&description=&action=create&status=new&priority=minor&component=madwifi%3A+other&version=&keywords=&cc=&checkbox_patch_attached=&preview=Preview
--22e90575-F--
HTTP/1.1 403 Forbidden
Accept-Ranges: bytes
Keep-Alive: timeout=5, max=512
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--22e90575-H--
Message: Warning. Pattern match "^/(wiki/|ticket/|newticket|simpleticket).*$" at REQUEST_URI. [id "420099"] [rev "1"] [msg "Suspicious Post"]
Message: Access denied with code 403 (phase 2). Pattern match "^$" at ARGS:description. [id "420011"] [rev "1"] [msg "new ticket with empty description"]
Action: Intercepted (phase 2)
Stopwatch: 1178542027781123 50758 (1019* 1405 -)
Producer: ModSecurity v2.1.0 (Apache 2.x)
Server: Apache/2.2.3 (Debian) DAV/2 SVN/1.4.2 mod_python/3.2.10 Python/2.4.4
WebApp-Info: "trac.madwifi" "-" "-"

--22e90575-Z--

Protected handlers

  • newticket
  • simpleticket

See also

n/a

History

rev:1
Initial version.