Christian Folini comments

Results 509 comments of


                                            Christian Folini

Detection for Edge Side Includes(ESI)

I'm not familiar with this technology. BUT, when I think about reflection attacks, request smuggling and all the odd things people like James Kettle, Gareth Hayes etc. come up with,...

fix(932180): avoid false positives

Ah, this is always such a thin line. But pharmasound is part of a word, while the asound we have in mind stands on its own. Maybe we can this...

fix(942350,942360): avoid comment bypass - this should be catch on PL1

Thank you @touchweb-vincent. I think your simple PR is a reasonable step in the right direction. As you correctly point out, the PR is not a complete solution, but it...

feat(942500): stronger hardening to improve PL1 protection

Thank you @touchweb-vincent. Like @dkegel-fastly, I see a high risk of new false positives. Truth be told, the generalization of the regex at PL1 is very ambitious. But also the...

fix(931130): Isolating 2-chars sequence with high risk of false positive on high entropy input

I'm with @touchweb-vincent in this discussion. But this also looks like a fundamental problem that warrants a conceptual discussion. The core argument is - as far as I understand it:...

fix(931130): Isolating 2-chars sequence with high risk of false positive on high entropy input

Hi @touchweb-vincent, so we discussed this at the retreat. This is a fundamental discussion and it is important. And we think we might have found an acceptable position for everyone....

AngularJS bypass XSS rules with Modsec 3.0.16 using CRS 4.19.0

I do not see this detected by 942430, but by 942431 at PL3. And then the aforementioned PL4 rules. Yet I do not think we can rely on PL3 and...

AngularJS bypass XSS rules with Modsec 3.0.16 using CRS 4.19.0

Now that's what I call a schoolbook example of a very good contribution to a CRS discussion. Thank you very much @ronanlaunayenovacom.

How to improve resistance to comment-based evasions ?

This is a worth while discussion. Thanks for launching it.