Merge pull request #2642 from martinhsv/v3/master

Support configurable limit on depth of JSON parsing

Author: martinhsv

CHANGES

@@ -1,9 +1,8 @@
 v3.x.y - YYYY-MMM-DD (to be released)
 -------------------------------------
 
-
-
-
+  - Support configurable limit on depth of JSON parsing
+    [@theMiddleBlue, @martinhsv]
 
 v3.0.5 - 2021-Jul-07
 --------------------

headers/modsecurity/rules_set_properties.h

@@ -366,6 +366,7 @@ class RulesSetProperties {
                             PropertyNotSetConfigBoolean);
 
         to->m_argumentsLimit.merge(&from->m_argumentsLimit);
+        to->m_requestBodyJsonDepthLimit.merge(&from->m_requestBodyJsonDepthLimit);
         to->m_requestBodyLimit.merge(&from->m_requestBodyLimit);
         to->m_responseBodyLimit.merge(&from->m_responseBodyLimit);
 
@@ -464,6 +465,7 @@ class RulesSetProperties {
     ConfigBoolean m_tmpSaveUploadedFiles;
     ConfigBoolean m_uploadKeepFiles;
     ConfigDouble m_argumentsLimit;
+    ConfigDouble m_requestBodyJsonDepthLimit;
     ConfigDouble m_requestBodyLimit;
     ConfigDouble m_requestBodyNoFilesLimit;
     ConfigDouble m_responseBodyLimit;