Christian Folini

icon indicating a website link https://www.christian-folini.ch

icon company https://www.netnea.com icon location Berne, Switzerland icon location Webserver Fortification Engineer and Advisor in the Art of Defense. OWASP ModSecurity Core Rule Set Co-Lead.

Results 509 comments of Christian Folini

Proposal for a new plugin: Machine Learning on ModSecurity

Thank you for your submission @fggillie. That was fast. For the record: I asked @fggillie to submit her work (-> EPFL Master Thesis) here so it could be polished into...

Proposal for a new plugin: Machine Learning on ModSecurity

Ideally generic. What we see so far is generic. One could then accompany it with a reference use case in the form of a blog post / tutorial.

Proposal for a new plugin: Machine Learning on ModSecurity

Thank you for chiming in. Are you working on ML as well?

Proposal for a new plugin: Machine Learning on ModSecurity

Thanks for the info, @vloup. Care contacting me via DM? [email protected]

Parameter Pollution: email[]aa=&email[]bb=

See PR #2747

Rule Id: 932150 false positive on time keyword

We talked about this in the [April issue chat](https://github.com/coreruleset/coreruleset/issues/2051#issuecomment-813570935). Here is our conclusion: @flo405 has a plan how to solve this plus some additional bypasses. He will coordinate with @franbuehler...

Rule Id: 932150 false positive on time keyword

We talked about this issue at our [recent project meeting](https://github.com/coreruleset/coreruleset/issues/2074#issuecomment-856173925). Decision: We have not heard from @flo405 anymore, so it's likely we have to start over from scratch ourselves. @franbuehler...

Rule Id: 932150 false positive on time keyword

Thank you @noneisland. You'll hear from @franbuehler or @lifeforms soon.

Rule Id: 932150 false positive on time keyword

We'll not so soon it seems. But this is not forgotten.

Rule Id: 932150 false positive on time keyword

Any update here @lifeforms?