Merge pull request #427 from yarikoptic/bf/nginx-regex-injection

BF: anchor introduced nginx-http-auth at the end
11 years ago · c5021b55f6
1 changed files with 1 additions and 1 deletions
--- a/config/filter.d/nginx-http-auth.conf
+++ b/config/filter.d/nginx-http-auth.conf
@ -4,7 +4,7 @@
 [Definition]


-failregex = ^ \[error\] \d+#\d+: \*\d+ user "\S+":? (password mismatch|was not found in ".*"), client: <HOST>, server: \S+, request: "\S+ \S+ HTTP/\d+\.\d+", host: "\S+"
+failregex = ^ \[error\] \d+#\d+: \*\d+ user "\S+":? (password mismatch|was not found in ".*"), client: <HOST>, server: \S+, request: "\S+ \S+ HTTP/\d+\.\d+", host: "\S+"\s*$

 ignoreregex =