[Modsecurity] Strip object tags

Michael Shinn mike at gotroot.com
Thu Sep 7 12:03:09 EDT 2006


No, mod_security can not strip or scrub data (no search and replace, for
example). 

On Thu, 2006-09-07 at 11:30 -0400, Kratzer, James (Xetron) wrote:
> Hi,
> 
> Is there a mod_security rule I can use to strip <object> </object>
> tags from html responses?  I want to allow the page through and only
> strip the <object> </object> blocks from the response so that activex
> controls are blocked.
> 
> Thanks 
> JK
> 
> _______________________________________________
> Modsecurity mailing list
> Modsecurity at gotroot.com
> http://lists.gotroot.com/mailman/listinfo/modsecurity
-- 
Michael T. Shinn                                    KeyID:0xDAE2EC86
Key Fingerprint:  1884 E657 A6DF DF1B BFB9 E2C5 DCC6 5297 DAE2 EC86
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xDAE2EC86
  
Got Root?  http://www.gotroot.com
modsecurity rules: http://www.modsecurityrules.com
Troubleshooting Firewalls:  http://troubleshootingfirewalls.com



More information about the Modsecurity mailing list