Christian Folini
Christian Folini
Hey @Absal1706, sorry for the inconvenience, let's try to sort this out. Am I right that GCP WAF means Google Cloud Armor? Are you a paying customer? What did their...
> Thank you for your swift reply. Glad to be of assistance. > > Are you a paying customer? What did their support say? > > Yes, paying customer. So...
Let's keep this open some more.
Wow, this is stunning. I only looked at this for 5 mins and multipart format is hard, but the request looks really innocent, namely the request line and the content-length....
Nginx does not allow you to display arbitrary env variables in the logfile. About half of the useful information above can not be displayed via nginx. A workaround is to...
You hit the nail on the head with your reasoning why most rules are written in phase 2. A quick peek at the Trustwave rule set tells me that it's...
@zimmerle: I think there is nothing wrong with giving the user a way to skip phases completely. It just should not be implicit and undocumented. If the option exists, it...
I do not think you should remove configuration options. But that's for a long term discussion. Near term: Will you revert 379f370 or how do you plan to fix this...
Any news on this front or a plan to share? Infos from CRS: We merged a PR (-> 1941) that shifts all the CRS rules that can run in phase:1...
Could we be part of the discussion, please? This issue affects our users, so we would like to chime in too. @zimmerle told us several times to report issues here...