How to catch XML Parse Error with REQBODY_PROCESSOR_ERROR

[touchweb-vincent]

Hello,

It's not a bug report, just an information share we hope some folks would find usefull.

If you want catch REQBODY_PROCESSOR_ERROR against requestBodyProcessor=XML, your rules on phase 2 will be bypass.

You must catch it on phase 3+.

This will work on both requestBodyProcessor=JSON and requestBodyProcessor=XML :

SecRule REQBODY_PROCESSOR_ERROR "!@eq 0" "id:'200003',phase:3,t:none,deny,status:403,msg:'Multipart request body failed strict validation: PE %{REQBODY_PROCESSOR_ERROR}''

curl -v 'https://preprod.X' -H 'content-type: application/xml' -d 'test'
curl -v 'https://preprod.X' -H 'content-type: application/json' -d 'test'

Have a good day

Vincent