v2: Accept requests whose body length is exactly equal to SecRequestBodyNoFilesLimit

[hnakamur]

what

Accept requests whose body length is exactly equal to SecRequestBodyNoFilesLimit.

why

The current implementation rejects requests when their body length is equal to SecRequestBodyNoFilesLimit.
However, according to the documented behavior, requests up to and including this limit should be accepted.

references

• The documentation states: “Configures the maximum request body size ModSecurity will accept for buffering, excluding the size of any files being transported in the request.” https://github.com/owasp-modsecurity/ModSecurity/wiki/Reference-Manual-%28v2.x%29#user-content-SecRequestBodyNoFilesLimit
• Tests verifying that requests with a body length equal to SecRequestBodyNoFilesLimit are accepted in v3:: Refine SecRequestBodyNoFilesLimit test cases to cover edge scenarios #3479

[sonarqubecloud]

Quality Gate failed

Failed conditions
E Maintainability Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE