Felipe Zipitría comments

Results 581 comments of


                                            Felipe Zipitría

Block proxy requests (GET http://example.org/ HTTP/1.1)

@dune73 Can we put this in a MR? What needs to be done here?

Fuzz tests #472 failed

Fixed in #1054.

New metric "Matched Rules"

Of course you can!

upgrade coraza to v3.0.3

@zc-devs Do you think it is a better time now to provide a PR?

Different behavior of the engines implicit `@rx` operator

My 2 cents: there should be no implicit operator anymore. If you want `@rx`, you need to add it to the rule. **This will be a breaking change**, but it...

Different behavior of the engines implicit `@rx` operator

There could be a message a standard deprecation message saying that the syntax is going to be removed and discourage its use. Then in 5 years you just remove it.

Different behavior of the engines implicit `@rx` operator

Welcome @zimmerle! Thanks for your insights!

Fixing part 7.12 of CIS Apache Benchmark - removing non-forward secrecy ciphers

@azurit @dune73 What's next here? Can you provide an update PR with the updated ciphers?

Relies on official e2e

Hey @M4tteoP ! Do you know why the e2e does never end running?

NextCloud False Positive

Hi @manuelroccon. Did you enable NextCloud exclusion rules in rule `id:900130` in `crs-setup.conf`?