Christian Folini comments

Results 509 comments of


                                            Christian Folini

update file `crawlers-user-agents.data`

Fixed via #3236

curl <-> test file conversion script

Maybe we define a minimal set of options we need to support. Ideally everything you need to do yaml -> script -> curl -> reverse-script -> yaml. And I agree...

False Positive REQUEST-941-APPLICATION-ATTACK-XSS / 941101 With Referer Headers With a Space and On

Yes. Sorry @aolszowka.

REQUEST-912-DOS-PROTECTION paranoia level 2 sets ip.dos_block=1 outside of dos_burst_time_slice window

I sat down and looked at the proof of concept PR by @theseion linked above. There are several issues and I eventually gave up on this. Here is a list:...

Nextcloud 20 false-positives

@azurit and @Xhoenix : Is this something you could address given your activities on the nextcloud rule exclusion plugin?

Nextcloud 20 false-positives

That's very good news. So if you address Webauthn we can then close this PR?

phpMyAdmin version 5.1 exclusion plugin

I think @fzipi tries to clean up the todo list for v4 removing everything that is not essential. Given plugins are distributed separately from mainline CRS nothing really changes outside...

copy, time and more false positives

@franbuehler could you check out the status here? Chances are this is done now. If not we need to prioritize it.

copy, time and more false positives

Thanks

copy, time and more false positives

Thanks for checking and thinking about solutions. I have no idea why `unix-shell-fps-pl1.ra` is not used here. I'm in favor of your proposals. Unless somebody has good reasons why these...