Task35Start - Write ruleset that checks request headers

See TasksExplained? for more infos about tasks. This task is based on the template at TaskTemplateStart

Status : closed
Category : gui
Date opened : 2007-02-14
Description : The ModSecurity ruleset should check http request headers strictly
Referenced in stories/tasks : IndividualHeaderCheck StrictHeaderCheck Story11Start
Testsuite : test/functional/rules_generator_test.rb
Commited revision : 118

Remarks :

We will give it a try with a strict set of http request headers. This means, that every header in the request has to be predefined and expected by the ModSecurity ruleset.

I do not know if this will eventually work out in practice. An alternative/advanced feature would be to allow additional headers and check with a generic rule.

---

Changelog

2007-02-15 - Written the routine and the test

See StrictHeaderCheck for infos on how we test the strict headers.
See IndividualHeaderCheck for infos on how we test the individual headers.