From d7ef5d166db58ec402408fa97c0b291906c3d8c9 Mon Sep 17 00:00:00 2001
From: Jan Przybylak <jp@j-p.space>
Date: Thu, 11 Jun 2020 16:44:48 +0200
Subject: [PATCH] Removed vulnerable catchall & anchor

---
 config/filter.d/nginx-bad-request.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/filter.d/nginx-bad-request.conf b/config/filter.d/nginx-bad-request.conf
index ea26d56a..03721f86 100644
--- a/config/filter.d/nginx-bad-request.conf
+++ b/config/filter.d/nginx-bad-request.conf
@@ -4,7 +4,7 @@
 [Definition]
 
 # The request often doesn't contain a method, only some encoded garbage
-failregex = ^<HOST> \- \S+ \[\] \".+\" 400 .+$
+failregex = ^<HOST> \- \S+ \[\] \"[^\"]+\" 400
 
 datepattern = {^LN-BEG}%%ExY(?P<_sep>[-/.])%%m(?P=_sep)%%d[T ]%%H:%%M:%%S(?:[.,]%%f)?(?:\s*%%z)?
               ^[^\[]*\[({DATE})