HEX
Server: nginx/1.28.0
System: Linux w3c-2 6.8.0-78-generic #78-Ubuntu SMP PREEMPT_DYNAMIC Tue Aug 12 11:34:18 UTC 2025 x86_64
User: inpa_co_1 (1082)
PHP: 8.3.29
Disabled: NONE
Upload Files
File: //etc/modsecurity.d/owasp/regex-assembly/932281.ra
##! Please refer to the documentation at
##! https://coreruleset.org/docs/development/regex_assembly/.

##! Bash Brace Expansion
##! Detects the following patterns which are common in Unix shell scripts and one-liners
##!
##! {,echo,#test}
##! {,cd,/etc,}
##! {,$'whoami',}
##! {,$"whoami",}
##! {,/?s?/?i?/c?t,/e??/p??s??,}
##!
##! Spaces are not allowed in brace expansions.
##! Note that `\}` would be a valid non-terminating sequence,
##! which, for simplicity, we detect as a terminating brace.
##! The following regex detects non-whitespace characters between braces, as an
##! extension of rule 932280, which only detects alphanumeric and dash characters.
\{
##!=>
##!> assemble
  ##! a word
  [^\s,:\}]*
  ##!=>
  ##! at least one comma is required
  ,
  ##!=>
  ##! more commas or words
  \S*
##!<
##!=>
\}