---
meta:
  author: lifeforms
  description: None
  enabled: true
  name: 933161.yaml
tests:
  - test_title: 933161-1
    desc: regexp; must run test in PL3!
    stages:
      - stage:
          input:
            data: gethostbynamE(
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
              User-Agent: ModSecurity CRS 3 Tests
            method: POST
            port: 80
            uri: /?%20checkDate%28%29
          output:
            log_contains: id "933161"
  - test_title: 933161-2
    desc: regexp; must run test in PL3!
    stages:
      - stage:
          input:
            data: gethostbynamE(
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
              User-Agent: ModSecurity CRS 3 Tests
            method: POST
            port: 80
            uri: /?foo=chroot%09%28%29
          output:
            log_contains: id "933161"
  - test_title: 933161-3
    desc: symlink \t()
    stages:
      - stage:
          input:
            data: gethostbynamE(
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
              User-Agent: ModSecurity CRS 3 Tests
            method: POST
            port: 80
            uri: /?foo=chroot%09%28%29
          output:
            log_contains: id "933161"
  - test_title: 933161-4
    desc: dl/*foo*/()
    stages:
      - stage:
          input:
            data: gethostbynamE(
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
              User-Agent: ModSecurity CRS 3 Tests
            method: POST
            port: 80
            uri: /?foo=chroot%09%28%29
          output:
            log_contains: id "933161"
  - test_title: 933161-5
    desc: dl/*foo*/()
    stages:
      - stage:
          input:
            data: gethostbynamE(
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
              User-Agent: ModSecurity CRS 3 Tests
            method: POST
            port: 80
            uri: /?foo=xucfirst%28%29
          output:
            no_log_contains: id "933161"
