From bade74425fea3b6a0b14b78e6d7a4872efbddcbe Mon Sep 17 00:00:00 2001
From: Laurence Jones <laurence.jones@live.co.uk>
Date: Thu, 21 Nov 2024 10:43:24 +0000
Subject: [PATCH] fix: nil check on appsec (#1177)

* fix: nil check on appsec

* Update index

---------

Co-authored-by: GitHub Action <action@github.com>
---
 .index.json                             |  8 ++++++--
 contexts/crowdsecurity/appsec_base.yaml | 12 ++++++------
 2 files changed, 12 insertions(+), 8 deletions(-)

diff --git a/.index.json b/.index.json
index e18a30fa228..4664c962142 100644
--- a/.index.json
+++ b/.index.json
@@ -6371,7 +6371,7 @@
  "contexts": {
   "crowdsecurity/appsec_base": {
    "path": "contexts/crowdsecurity/appsec_base.yaml",
-   "version": "0.6",
+   "version": "0.7",
    "versions": {
     "0.1": {
      "digest": "df177378b9b01c6c8b67ff5085eda9325c67b337e31d60c4ea95f743783a5e24",
@@ -6396,9 +6396,13 @@
     "0.6": {
      "digest": "9523c172a9aebbb4422d9cd39eb4ad89221053e522223f7c65ba0bf92f8fa8ff",
      "deprecated": false
+    },
+    "0.7": {
+     "digest": "def7e20fc031282f232243fb4593464a73b5e7912f1ac07251907d8bcbf9c64f",
+     "deprecated": false
     }
    },
-   "content": "Y29udGV4dDoKICBydWxlczoKICAgIC0gZXZ0Lk1ldGEucnVsZV9uYW1lCiAgdGFyZ2V0X3VyaToKICAgIC0gZXZ0Lk1ldGEudGFyZ2V0X3VyaQogICAgLSBtYXRjaC51cmkKICBpZDoKICAgLSBtYXRjaC5pZAogIG5hbWU6CiAgIC0gbWF0Y2gubmFtZQogIG1ldGhvZDoKICAgLSBtYXRjaC5tZXRob2QKICBtYXRjaGVkX3pvbmVzOgogICAtIG1hdGNoLm1hdGNoZWRfem9uZXMKICBtc2c6CiAgIC0gbWF0Y2gubXNnCg==",
+   "content": "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",
    "author": "crowdsecurity",
    "labels": null
   },
diff --git a/contexts/crowdsecurity/appsec_base.yaml b/contexts/crowdsecurity/appsec_base.yaml
index f1edbeb1f0e..655da9e8527 100644
--- a/contexts/crowdsecurity/appsec_base.yaml
+++ b/contexts/crowdsecurity/appsec_base.yaml
@@ -3,14 +3,14 @@ context:
     - evt.Meta.rule_name
   target_uri:
     - evt.Meta.target_uri
-    - match.uri
+    - "match.uri != nil ? match.uri : ''"
   id:
-   - match.id
+    - "match.id != nil ? match.id : ''"
   name:
-   - match.name
+    - "match.name != nil ? match.name : ''"
   method:
-   - match.method
+    - "match.method != nil ? match.method : ''"
   matched_zones:
-   - match.matched_zones
+    - "match.matched_zones != nil ? match.matched_zones : ''"
   msg:
-   - match.msg
+    - "match.msg != nil ? match.msg : ''"