fix: variable parsing error

internal/seclang/rule_parser.go

@@ -145,6 +145,9 @@ func (rp *RuleParser) ParseVariables(vars string) error {
 				isEscaped = !isEscaped
 			default:
 				curKey = append(curKey, c)
+				if isEscaped {
+					isEscaped = false
+				}
 			}
 		case 3:
 			// XPATH

internal/seclang/rule_parser_test.go

@@ -5,6 +5,7 @@ package seclang
 
 import (
 	"errors"
+	"reflect"
 	"strings"
 	"testing"
 
@@ -274,6 +275,34 @@ func TestRawChainedRules(t *testing.T) {
 	}
 }
 
+func TestParseRule(t *testing.T) {
+	tests := []struct {
+		name string
+		vars string
+		want int
+	}{
+		{"Does not contain escape characters", `ARGS_GET:/(test)/|REQUEST_XML`, 2},
+		{"The last variable contains escape characters", `ARGS_GET|REQUEST_XML:/(test)\b/`, 2},
+		{"Contains escape characters", `ARGS_GET:/(test\b)/|REQUEST_XML`, 2},
+	}
+
+	for _, tc := range tests {
+		tt := tc
+		t.Run(tt.name, func(t *testing.T) {
+			rp := RuleParser{
+				rule: corazawaf.NewRule(),
+			}
+			if err := rp.ParseVariables(tt.vars); err != nil {
+				t.Error(err)
+			}
+			got := reflect.ValueOf(rp.rule).Elem().FieldByName("variables").Len()
+			if got != tt.want {
+				t.Error("variables parse error want", tt.want, "got", got)
+			}
+		})
+	}
+}
+
 func BenchmarkParseActions(b *testing.B) {
 	actionsToBeParsed := "id:980170,phase:5,pass,t:none,noauditlog,msg:'Anomaly Scores:Inbound Scores - Outbound Scores',tag:test"
 	for i := 0; i < b.N; i++ {