Christian Folini

icon indicating a website link https://www.christian-folini.ch

icon company https://www.netnea.com icon location Berne, Switzerland icon location Webserver Fortification Engineer and Advisor in the Art of Defense. OWASP ModSecurity Core Rule Set Co-Lead.

Results 509 comments of Christian Folini

update file `iis-errors.data`

I agree. That would be an improvement in terms of overall rule set quality.

update file `iis-errors.data`

I feared for a long time there might be some dirty past in those response rules.

Proposal for ModSecurity recommended rules

Removing the v4. Milestone label since we decided in March that we won't be able to do this for v4. Very bitter decision.

Proposal for ModSecurity recommended rules

We'll keep this open for as long as it has to be. There will be new recommended rules. Just not now.

Prepare CRS 4.0 slide deck

I'll self-assign the issue.

Prepare CRS 4.0 slide deck

Honestly, I think it's part of the milestone. It has to be ready in time. And doing a video on top would certainly be helpful (and more work if done...

Prepare CRS 4.0 slide deck

We're getting there. So this is not stale. Just postponed. Also, there is a draft version by @fzipi.

Exclusion list fot RoundCube webmail

Any update here @azurit?

Exclusion list fot RoundCube webmail

I do not mind either way. We're going to have to port them all to plugins anyways and doing it in a badge might mean we do it in a...

MS Edge triggers false positive on rule 920274

Thanks for reporting @vandanrohatgi. We are usually reluctant to trune away FPs in PL4 (and also PL3), but here we are facing a situation where a header sent on every...