Skip to content

Unecessar escaped quote mark in JSON logs #365

Open
owasp-modsecurity/ModSecurity
#3558
Open
Unecessar escaped quote mark in JSON logs#365
owasp-modsecurity/ModSecurity
#3558

Description

@jaysee
jaysee
opened on Dec 8, 2025

hello,

I noticed that there was an added quotation mark in the modsec_audit logs, at least in the JSON version, in the producer->components section

    "producer": {
        "components": [
            "OWASP_CRS/4.21.0-dev\""
        ],
        "connector": "ModSecurity-nginx v1.0.4",
        "modsecurity": "ModSecurity v3.0.14 (Linux)",
        "secrules_engine": "Enabled"
    },

this also happens when we add some components using
SecComponentSignature "hello/world"

regards

Activity

  1. airween commented on Mar 4, 2026

    @airween
    airween
    on Mar 4, 2026
    Member

    Hi @jaysee,

    I'm really sorry for this late reply.

    That's very weird, and we definitely need to investigate this issue. Please let me take a look at this soon.

  2. airween commented on Sep 10, 2026

    @airween
    airween
    on Sep 10, 2026
    Member

    It seems like #ModSecurity/3558 by @meirdev will solves this issue. Thank you for the patience.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions