Christian Folini comments

Results 509 comments of


                                            Christian Folini

copy, time and more false positives

Crossreferencing #2044, where we are struggling with keyword `time` in 931150.

copy, time and more false positives

Let's give @lifeforms a bit more time here.

copy, time and more false positives

Let's keep this open for a bit more.

False Positive REQUEST-941-APPLICATION-ATTACK-XSS / 941101 With Referer Headers With a Space and On

@zimmerle: I remember you taking over maintenance of libinjection from Nick Galbreath 2 years ago or so. Could you give us a status of that?

False Positive REQUEST-941-APPLICATION-ATTACK-XSS / 941101 With Referer Headers With a Space and On

Yes, it is an unfortunate situation. We did a workshop on the libinjection situation at our recent CRS developer summit. Unfortunately, the team is torn what to do about it....

False Positive REQUEST-941-APPLICATION-ATTACK-XSS / 941101 With Referer Headers With a Space and On

We're aware of the situation, so you can also close it / let it get closed. And new reporters usually report before digging up You have a point with writing...

fix(rce): block PHP function calls without trailing semi-colon (stricter sibling)

### CRS Bug Bounty PR assessment * **Rules affected** (list rules): 933211 **(new rule)** * **Paranoia Level addressed** (1, 2, 3, 4, full or explain): 3 * **FTW passes** (yes...

Shell aliasing and other techniques for RCE

Oh my, that's a shitload of crazy evasions. Did you look into the possibilities to expand 932200 (PL2)?

Shell aliasing and other techniques for RCE

Hope somebody wants to grind their teeth into this. The last 1-2 years I got the feeling that we are weaker on RCE than we previously assumed. So there is...

Shell aliasing and other techniques for RCE

This is also meant to cover `BBBZARPI`.