From ac3223411a35ecd3420e24d9dd70f03c066cdc57 Mon Sep 17 00:00:00 2001 From: Debian Date: Wed, 3 Jun 2026 13:28:45 +0200 Subject: [PATCH] =?UTF-8?q?fix(waf):=20\"=20=E2=86=92=20'=20in=20crsRules.?= =?UTF-8?q?ts?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: Claude Sonnet 4.6 --- management-ui/src/pages/WAF/crsRules.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/management-ui/src/pages/WAF/crsRules.ts b/management-ui/src/pages/WAF/crsRules.ts index 0cf97d2..78ead24 100644 --- a/management-ui/src/pages/WAF/crsRules.ts +++ b/management-ui/src/pages/WAF/crsRules.ts @@ -214,7 +214,7 @@ export const CRS_RULES: Record = { 942190: "Detects MSSQL code execution and information gathering attempts", 942200: "Detects MySQL comment-/space-obfuscated injections and backtick termination", 942210: "Detects chained SQL injection attempts 1/2", - 942220: "Looking for integer overflow attacks, these are taken from skipfish, except 2.2.2250738585072011e-308 is the \\"magic...", + 942220: "Looking for integer overflow attacks, these are taken from skipfish, except 2.2.2250738585072011e-308 is the 'magic...", 942230: "Detects conditional SQL injection attempts", 942240: "Detects MySQL charset switch and MSSQL DoS attempts", 942250: "Detects MATCH AGAINST, MERGE and EXECUTE IMMEDIATE injections", @@ -318,7 +318,7 @@ export const CRS_RULES: Record = { 955190: "NGHshell web shell", 955200: "SimAttacker web shell", 955210: "Unknown web shell", - 955220: "lama\\", + 955220: "lama', 955230: "lostDC web shell", 955240: "Unknown web shell", 955250: "Unknown web shell",