add support for MULTIPART_PART_HEADERS

[jptosso]

Add support for MULTIPART_PART_HEADERS

This variable is a collection of all part headers found within the request body with Content-Type multipart/form-data. The key of each item in the collection is the name of the part in which it was found, while the value is the entire part-header line -

• including both the part-header name and the part-header value.

SecRule MULTIPART_PART_HEADERS:parm1 "@rx content-type:.*jpeg" "phase:2,deny,status:403,id:500074,t:lowercase"

From: https://github.com/SpiderLabs/ModSecurity/releases/tag/v3.0.8

Closes #451

[jptosso]

It seems like http.Header is not "sorted". Index for the multiparts headers won't be consistent.

[codecov-commenter]

Codecov Report

Base: 73.10% // Head: 73.13% // Increases project coverage by +0.03% 🎉

Coverage data is based on head (1d503df) compared to base (5408fcd).
Patch coverage: 100.00% of modified lines in pull request are covered.

Additional details and impacted files

@@            Coverage Diff             @@
##           v3/dev     #452      +/-   ##
==========================================
+ Coverage   73.10%   73.13%   +0.03%     
==========================================
  Files         143      143              
  Lines        6584     6593       +9     
==========================================
+ Hits         4813     4822       +9     
  Misses       1494     1494              
  Partials      277      277              

Flag	Coverage Δ
no-tinygo	73.18% <100.00%> (+0.03%)	⬆️
overall	73.13% <100.00%> (+0.03%)	⬆️
tinygo	72.03% <100.00%> (+0.04%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files	Coverage Δ
internal/corazawaf/transaction.go	65.34% <ø> (ø)
types/variables/variables.go	93.33% <ø> (ø)
bodyprocessors/multipart.go	71.25% <100.00%> (+2.75%)	⬆️
internal/corazawaf/waf.go	96.27% <100.00%> (+0.02%)	⬆️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report at Codecov.
📢 Do you have feedback about the report comment? Let us know in this issue.

[fzipi]

It seems like http.Header is not "sorted". Index for the multiparts headers won't be consistent.

This makes sense based on the implementation. Do we need them to be consistent?

[jptosso]

Not really, modsecurity doesn't support ordered inputs neither.

Unpredictable Hpp could be performed though

[fzipi]

LGTM now!

[jcchavezs]

I think this file should be generated, what do you think? Wanna give a try @M4tteoP ?