ModSecurity icon indicating copy to clipboard operation
ModSecurity copied to clipboard

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range o...

Results 300 ModSecurity issues
Sort by recently updated
recently updated
newest added

## what Add PR's to `CHANGES` ## why PR's weren't added during the merge process.

3.x
do not merge

## what Add handling of Multipart Header's "filename*" (asterisk at the end!) field. ## why mod_security2 (v2) does not handle MULTIPART header's "filename*" field, eg: ``` Content-Disposition: form-data; name="file"; filename*=UTF-8''r%C3%A9sum%C3%A9.pdf...

2.x

I installed modsecurity on centos7, operating system version 3.10.0-1160.105.1.el7.x86_64. At the beginning of my operating system gcc version is gcc (GCC) 4.8.5 20150623 (Red Hat 4.8.5-44), there is no problem...

3.x

## what Add PR's to `CHANGES` ## why PR's weren't added during the merge process.

2.x
do not merge

**Describe the bug** I don't see any real problem just noticed logs entries. **Logs and dumps** SecDebugLog & SecDebugLogLevel 3 ``` [172440041140.141021]` [/vystrelovaci-rukavice-3-sipky/] [1] rx: regex error 'MATCH_LIMIT' for pattern...

3.x

## what Update build configuration to build the library using std C++20 ## why The goal of this PR is not necessarily to update this configuration at this time, but...

3.x
do not merge

The goal of this issue is to collect and centralize information about multi-threading support of the current version of modSecurity , as the topic has come up in a number...

3.x

**Describe the bug** A clear and concise description of what the bug is. **Logs and dumps** Output of: 1. DebugLogs (level 9) 2. AuditLogs 3. Error logs 4. If there...

3.x

**Describe the bug** ModSecurity sometimes doesn't fully log all of the rule IDs triggered within a request, this is annoying with false positives as you'll have to go through multiple...

bug
3.x

Hello! I would like to know what would be the best way I can do something similar to this (taken from ChatGPT). I would need to detect when there are...

help wanted