Rule 420011: don't allow empty ticket description
Purpose
Prevents new tickets with no description being created.
Checks that description form parameter is not empty.
Example
--22e90575-A-- [07/May/2007:14:47:07 +0200] sus0A6wQKoYAABfmfpUAAAAQ XX.XX.XX.XX 34679 217.24.1.134 80 --22e90575-B-- POST /simpleticket HTTP/1.1 Via: 1.1 ISA-IWSS Cookie: trac_form_token=34ca38b7ed19329a1d5337a3; trac_session=1b006e3c81e14a731225d97e Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1) Host: madwifi.org Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword, application/x-shockwave-flash, */* Referer: http://madwifi.org/simpleticket Accept-Language: en-us UA-CPU: x86 Pragma: no-cache Connection: Keep-Alive Content-Length: 306 --22e90575-C-- __FORM_TOKEN=34ca38b7ed19329a1d5337a3&reporter=someone@domain.tld&summary=error+in+building+the+driver&type=defect&description=&action=create&status=new&priority=minor&component=madwifi%3A+other&version=&keywords=&cc=&checkbox_patch_attached=&preview=Preview --22e90575-F-- HTTP/1.1 403 Forbidden Accept-Ranges: bytes Keep-Alive: timeout=5, max=512 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 --22e90575-H-- Message: Warning. Pattern match "^/(wiki/|ticket/|newticket|simpleticket).*$" at REQUEST_URI. [id "420099"] [rev "1"] [msg "Suspicious Post"] Message: Access denied with code 403 (phase 2). Pattern match "^$" at ARGS:description. [id "420011"] [rev "1"] [msg "new ticket with empty description"] Action: Intercepted (phase 2) Stopwatch: 1178542027781123 50758 (1019* 1405 -) Producer: ModSecurity v2.1.0 (Apache 2.x) Server: Apache/2.2.3 (Debian) DAV/2 SVN/1.4.2 mod_python/3.2.10 Python/2.4.4 WebApp-Info: "trac.madwifi" "-" "-" --22e90575-Z--
Protected handlers
- newticket
- simpleticket
See also
n/a
History
- rev:1
- Initial version.
