Ervin Hegedus comments

Repositories
Issues
Comments

Results 413 comments of


                                            Ervin Hegedus

Behavior change in regex macro expansion from 2.9.7 to 2.9.8 affecting CRS 3.2.x and 3.3.x

> I'm not sure this change was sufficiently considered (or at least announced) for it to go into an x.x.7 -> x.x.8 release. Agree. > As OWASP CRS v3.3.x is...

Behavior change in regex macro expansion from 2.9.7 to 2.9.8 affecting CRS 3.2.x and 3.3.x

Thanks @M4tteoP for the explanation. Honestly, now I'm a bit confused, because @jptosso [wrote](https://github.com/owasp-modsecurity/ModSecurity/issues/3380#issuecomment-2874081191) that _"Coraza used libmodsecurity as a reference"_, and now you wrote that _"Coraza is performing macro...

Rule 932370 has false positive for "At" after newline

Hi @ssigwart, thanks for letting know this issue. As I remember there was a discussion about the word "at", but it seems that finally we added that. It's sad that...