Thibault "bui" Koechlin

It is not working properly

Parse cookies, so we can adress them in the same way we would adress another varialbe, such as `$COOKIE_VAR:foobar`

Configuration parsing, even if functional, is really terrible :) - [ ] could be a lot shorter - [ ] could be a lot less ghetto - [ ] should...

As suggested by @jvoisin [here](https://github.com/nbs-system/naxsi/issues/431), we should make sure our test suite runs on various distributions : https://github.com/nbs-system/snuffleupagus/commit/df84a0fc60eb7d937b27a4ac540cb637a55972bf

Shall we change rule 1000 regex's ?

7

hello, to limit the amount of false positive on core rule 1000 : ``` MainRule "rx:select|union|update|delete|insert|table|from|ascii|hex|unhex|drop" "msg:sql keywords" "mz:BODY|URL|ARGS|$HEADERS_VAR:Cookie" "s:$SQL:4" id:1000; ``` Shall we change the regex to something like...

For new users, it can be quite tricky to understand that `evt.Meta.source_ip` is expected for most event types, and things can get wrong easily when creating one. I guess having...

**Is your feature request related to a problem? Please describe.** Currently, disabling a specific scenario that is part of a collection without tainting the whole collection isn't possible. The alternative...

**Is your feature request related to a problem? Please describe.** I would like to be able to have whitelists that would apply on incoming community blocklists from CAPI. **Describe the...