vBulletin Mods

The Official vBulletin Modifications Site
https://www.vbulletin.org/forum/showthread.php?t=326701

Parentheses in thread titles
by jagtpf
04 Sep 2018 07:50

Does anyone know why there's a security issue with the use of () in thread titles?

My host server uses OWASP ModSecurity and since the settings were 'ramped' up, we've been unable to use ().

The restriction doesn't always work...ie

This is a title (test) - will invariably fail

but

This is another title(test) - will often succeed.

I know there's a BOP5 hack to get around the issue - but until I can be sure of what the issue is....

Geoff


All times are GMT. The time now is 18:11.

Powered by vBulletin® Version 3.8.14
Copyright © 2020, MH Sub I, LLC dba vBulletin. All Rights Reserved. vBulletin® is a registered trademark of MH Sub I, LLC
Copyright ©2001 - , vbulletin.org. All rights reserved.