1[
2
3  {
4    "enabled":1,
5    "version_min":300000,
6    "title":"multipart parser (final CRLF)",
7    "client":{
8      "ip":"200.249.12.31",
9      "port":123
10    },
11    "server":{
12      "ip":"200.249.12.31",
13      "port":80
14    },
15    "request":{
16      "headers":{
17        "Host":"localhost",
18        "User-Agent":"curl/7.38.0",
19        "Accept":"*/*",
20        "Content-Length":"330",
21        "Content-Type":"multipart/form-data; boundary=---------------------------69343412719991675451336310646",
22        "Expect":"100-continue"
23      },
24      "uri":"/",
25      "method":"POST",
26      "body":[
27               "-----------------------------69343412719991675451336310646",
28               "Content-Disposition: form-data; name=\"a\"\r",
29               "\r",
30               "1\r",
31               "1.1\r",
32               "1.2\r",
33               "1.3\r",
34               "-----------------------------69343412719991675451336310646",
35               "Content-Disposition: form-data; name=\"b\"\r",
36               "\r",
37               "2\r",
38               "2.1\r",
39               "2.2\r",
40               "2.3\r",
41               "-----------------------------69343412719991675451336310646--"
42      ]
43    },
44    "response":{
45      "headers":{
46        "Date":"Mon, 13 Jul 2015 20:02:41 GMT",
47        "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT",
48        "Content-Type":"text/html"
49      },
50      "body":[
51        "no need."
52      ]
53    },
54    "expected":{
55      "debug_log":"Adding request argument \\(BODY\\): name \"b\", value \"22.12.22.3\"",
56      "http_code":403
57    },
58    "rules":[
59        "SecRuleEngine On",
60        "SecRequestBodyAccess On",
61        "SecRule MULTIPART_STRICT_ERROR \"@eq 1\" \"phase:2,deny,id:500055\"",
62        "SecRule MULTIPART_UNMATCHED_BOUNDARY \"@eq 1\" \"phase:2,deny,id:500056\"",
63        "SecRule REQBODY_PROCESSOR_ERROR \"@eq 1\" \"phase:2,deny,id:500057\"",
64        "SecRule ARGS_POST \"@eq 1231\" \"phase:2,deny,id:500067\""
65    ]
66  }
67]
68