Tag not working with macro expansion

[fzipi]

Discussed in #1117

^{Originally posted by fardin01 July 30, 2024}
According to tag action documentation, tag action supports Macro Expansions. However, it does not seem to work.

tag:'request-id:%{REQUEST_HEADERS.X-Request-ID}' produces [tag \"request-id:%{REQUEST_HEADERS.X-Request-ID}\"] in the log. I have also tried:

SecRule REQUEST_HEADERS:x-request-id ".*" "id:900001,phase:1,pass,nolog,setvar:tx.x-request-id=%{MATCHED_VAR}"

tag:'request-id:%{tx.x-request-id}',\

which produces [tag \"request-id:%{tx.x-request-id}\"]. How do I make this work?

[fzipi]

Took a look at this code. It will need a big refactor, as the tags are just strings for now. Probably because of performance reasons. But in the end we should:

• correct the documentation that says we support it.
• prioritize the implementation