<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>NginX Homies,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>It appears that the $URL:/ construct isn’t working… in a set of test scripts we are running we noticed this.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>Original Rule, placed within the http block in the configuration file. This rule rejected all requests, regardless of match or not.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Helvetica","sans-serif"'>MainRule "rx:\"" "msg:Filtering key_one variable" "mz:$URL:/validate-bad-key-variable|$ARGS_VAR:key_one|$HEADERS_VAR:X-Key-One" "s:$INVALID_KEY:8" id:1666;<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>Modified Rule after binary testing to find the culprit, placed within the http block in the configuration file. This rule functioned as expected, but was not limited in it’s URL scope as desired.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Helvetica","sans-serif"'>MainRule "rx:\"" "msg:Filtering key_one variable" "mz:URL|$ARGS_VAR:key_one|$HEADERS_VAR:X-Key-One" "s:$INVALID_KEY:8" id:1666;<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Helvetica","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal>Has anyone else encountered this bug?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Thanks,<o:p></o:p></p><p class=MsoNormal>Ed<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><table class=MsoNormalTable border=1 cellspacing=0 cellpadding=0 width="98%" style='width:98.42%;border:none;border-top:solid #6A737B 1.0pt'><tr><td width=68 style='width:51.0pt;border:none;padding:0in 15.75pt 0in 0in'><p class=MsoNormal><span style='font-size:9.0pt;font-family:"Arial","sans-serif"'><img width=57 height=96 id="Picture_x0020_1" src="cid:image001.png@01CF5EE8.0CDF2D10" alt="Description: Description: adobe_logo_web"></span><span style='font-size:9.0pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></p></td><td width=553 valign=bottom style='width:414.9pt;border:none;padding:0in 0in 0in 0in'><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width=671 style='width:503.25pt'><tr><td width=239 valign=bottom style='width:179.25pt;padding:0in 0in 0in 0in'><p class=MsoNormal style='line-height:11.25pt'><b><span style='font-size:9.0pt;font-family:"Arial","sans-serif"'>Edward Prevost</span></b><span style='font-size:9.0pt;font-family:"Arial","sans-serif"'><br>Platform Security Architect<br>Adobe Systems<o:p></o:p></span></p><p class=MsoNormal style='line-height:11.25pt'><span style='font-size:9.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p></td><td width=192 valign=bottom style='width:2.0in;padding:0in 0in 0in 0in'><p class=MsoNormal style='line-height:11.25pt'><span lang=EN style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#111111'>v. 668230<o:p></o:p></span></p><p class=MsoNormal style='line-height:11.25pt'><span lang=EN style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#111111'>p. 408.536.6823<o:p></o:p></span></p><p class=MsoNormal style='line-height:11.25pt'><span lang=EN style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#111111'>m. 509.254.7690 <o:p></o:p></span></p><p class=MsoNormal style='line-height:11.25pt'><span lang=EN style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#111111'><o:p> </o:p></span></p></td><td width=240 valign=bottom style='width:2.5in;padding:0in 0in 0in 0in'><p class=MsoNormal style='line-height:11.25pt'><span style='font-size:9.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal style='line-height:11.25pt'><span lang=EN style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#111111'>@EdwardPrevost</span><span style='font-size:9.0pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></p><p class=MsoNormal style='line-height:11.25pt'><span style='font-size:9.0pt;font-family:"Arial","sans-serif"'>345 Park Ave<br>San Jose, CA 95011<o:p></o:p></span></p><p class=MsoNormal style='line-height:11.25pt'><span style='font-size:9.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p></td></tr></table></td><td valign=bottom style='border:none;padding:0in 0in 0in 0in'><p class=MsoNormal><span style='font-size:9.0pt;font-family:"Arial","sans-serif"'> </span><span style='font-size:9.0pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></p></td></tr></table><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>