Christian Folini

icon indicating a website link https://www.christian-folini.ch

icon company https://www.netnea.com icon location Berne, Switzerland icon location Webserver Fortification Engineer and Advisor in the Art of Defense. OWASP ModSecurity Core Rule Set Co-Lead.

Results 509 comments of Christian Folini

`multiline` regex rules with inconsistent behaviour across engines

Very good writeup, thanks (I edited it slightly for even better comprehension). Question: I see the different behaviors of the engines. What are the reasons the ModSec 2.9 behavior is...

`multiline` regex rules with inconsistent behaviour across engines

Thanks for the explanation. I like the **performance advantage and enabling when needed** argument this coupled with consistency should be all it takes to convince people.

`multiline` regex rules with inconsistent behaviour across engines

Why would you use the `+` in your example `[\r\n]+}`?

`multiline` regex rules with inconsistent behaviour across engines

Thank you. (I do not want to sound nagging, but I want to be sure I really understand things.)

`multiline` regex rules with inconsistent behaviour across engines

Thank you. I think we need @airween to discuss the approach to get ModSec v3 to adopt the ModSec v2 standard of `PCRE2_DOLLAR_ENDONLY`: It's is the old standard, it's more...

Document rule exclusion pkg to plugin migration from CRS3 to CRS4 in separate blog post

That would be an alternative to the idea to describe how to create your own plugin. And actually quite a good alternative. What do you think?

Document rule exclusion pkg to plugin migration from CRS3 to CRS4 in separate blog post

Ping @fzipi.

Document rule exclusion pkg to plugin migration from CRS3 to CRS4 in separate blog post

OK. Consider this done!

Document rule exclusion pkg to plugin migration from CRS3 to CRS4 in separate blog post

I'm all for migration to webpage. As documented above I had planned to write this for the WAF month media campaign by OWASP's outreach coordinator Jason. Then he left and...

fix: adding missing tags and ver action

Apparently linter is not checking this. I see 3 tags missing from detection rules. That's clearly a bug. I think the policy was to only tag the detection rules. The...