[
{
  "enabled": 1,
  "version_min": 209000,
  "version_max": -1,
  "title": "Macro expansion inside regex does not work",
  "url": "https:\/\/github.com\/SpiderLabs\/ModSecurity\/issues\/1528",
  "gihub_issue": 1528,
  "client": {
    "ip": "200.249.12.31",
    "port": 2313
  },
  "server": {
    "ip": "200.249.12.31",
    "port": 80
  },
  "request": {
    "uri":"/?param=attack",
    "headers": "",
    "body": "",
    "method": "GET",
    "http_version": 1.1
  },
  "response": {
    "headers": "",
    "body": ""
  },
  "expected": {
    "debug_log": "Rule returned 1",
    "error_log": "Matched \"Operator `Rx' with parameter `\\^attack\\$'"
  },
  "rules": [
    "SecRuleEngine On",
    "SecAction \"id:1, nolog, setvar:tx.bad_value=attack\"",
    "SecRule ARGS:param \"@rx ^%{tx.bad_value}$\" \"id:2,block\""
  ]
}
]
