As now it handles these strings it gets the same:
name="whatever,this,might,be";name2="value2"
name="whatever,this,might,be",name2="value2"
How can this affect modsecurity at all????
Forgive me my ignorance, but I do not see any handling of " chars.
your strings should now result in 5 variables
1. variable: name - content: "whatever
2. variable: this - empty
3. variable: might - empty
4. variable: be" - empty
5. variable: name2 - content: "value"
Off course this is wrong :)
Stefan Esser
ps: if there is any magic handling of " chars please point me to it...