Bug ID 1229861: Signature rule : regex "i" modifier should be translated into "nocase", instead of prepending "(?i)"

Last Modified: Mar 30, 2024

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 16.1.4.2

Opened: Jan 24, 2023

Severity: 5-Cosmetic

Symptoms

The "i" modifier is translated into "(?i)" that does not corresponds with matchCase flag ("Case Sensitive" option in GUI) in the control plane. This may introduce a confusion when user writes a regex with "i" in advanced mode, and switch to simple mode. User would expect "Case Sensitive" option is unchecked to "i", but in GUI it displays as checked. The matching behavior is as configured with "i", case-insensitive.

Impact

Possible confusion in GUI.

Conditions

In advanced mode, configure following pattern with "i" modifier. re2:"/abc/Vi"; norm;

Workaround

Use "nocase" modifier instead.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips