[Emerging-Sigs] Eleonore Drive By's and the Redirection To Them

evilghost@packetmail.net evilghost at packetmail.net
Tue Oct 5 15:13:49 EDT 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



On 10/05/2010 02:11 PM, Joel Esler wrote:
> I haven't used the http_cookie keyword, but since it's a normalized
> buffer, I assume it would be similar to http_uri, where you can't do
> relative statements to a normalized buffer.

- From what I recall (there was some back and forth on the list) you can
use relative content modifiers so long as you constrain all the content
matches to the same normalized buffer.  I'd have to dig up the thread...

- -evilghost
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQIcBAEBAgAGBQJMq3jtAAoJENgimYXu6xOHNIoP/12Y+oM0gf2TodrZgVWRBwHs
gyD/az96zOrXDjB8QzzpiK7DIBU3Q+GZhZ0LdYJJIA9SC5lZwpmt8Y/bzlwHgmaT
N8j+vIwHzDZ41WCN42AWOZZGTNIq4COY+7wZcpsVccLzYBAQIZF2jKzbkfLpOzq2
sFVI1OQdzdw6bNlHbEOeiCZ0j+7K8DuRcAgX1VNcQJ9qSQ5K4kLWBgyUZKQpSIrX
8OEMkHsS5nw6hwSpqkkaoH1gAHneYPvEZjQyaCQMdrWn1do4tLsWyRgGcGCqyegQ
2yMlNco08v1GHIUEoacuAD30YBl3yg8RNOmWvoeQH2HPXDK7WuvSYyiKiYCIGyU0
e1MTn0pZljvHoKNj5KQayiCegFgMaCWuHB6QLQFIIM9bgwn079YZ50Q3FSlxLQ2Q
euyVMhvKLPdZCCvuB91BUGYJ9AiPZZPjpq81dugFWcPHnQYuEYsq7tP3qmbNn7an
dy53lZ0e6W/Nwm/kiGyLdvi0u6bPzALACW74VrVGTTn8Yy/vtN3Fe/8RbyyrYk1q
je1XcTU3aDc08x19XGTrKrdaGAkf5yhSc7Fif1Y4v+EAsIpOx48biGDMchrnQcLk
B8IIDTFiXDx4p+uiQpW5gvaYW3vYr346DafSmTfXV2yk8kbIjhE0mjxL+G3QP/iQ
360a0zZvWOuFvWhzITY2
=+Mqj
-----END PGP SIGNATURE-----


More information about the Emerging-sigs mailing list