Felipe Zipitría

@client9 Hey Nick! Can we add a some documentation so the community knows there is a new fork (from https://github.com/client9/libinjection/issues/150#issuecomment-668179739)? Also archiving this repo might make sense, so people won't...

Parameter Pollution: email[]aa=&email[]bb=

1

### Description Some application servers will ignore additional garbage after `[]` and treat it as an array parameter. We need to think implementable solutions: - can we count foo[]aa, foo[]bb...

Add test to CI to check for re2 compatibility in rules

3

### Motivation Now that we have banned all pcre2 only regexps, we need to keep this line forward. ### Proposed solution Use a new pipeline test. it will extract regular...

fix(941160): move to full regexp-assemble

1

Signed-off-by: Felipe Zipitria This are the changes made to the regexp: - create prefix for js properties - add all js properties - create prefix for html properties - add...

fix(932105): update data list

15

Signed-off-by: Felipe Zipitria Updates the second part of the regexp using unix-shell.data commands.

fix(932100): update data list

10

Signed-off-by: Felipe Zipitria Updated data list based on unix-shell.data. I've also added some regexes for programming languages with versions. Fixes #2673 .

Move DoS rules to plugin

32

### Motivation Per [meeting decision](https://github.com/coreruleset/coreruleset/issues/2330#issuecomment-1004310622), we are going to transfer these rules to a new DoS plugin. ### Proposed solution - [x] Create new plugin structure and move files -...

### Motivation The regexes contained in the data file can easily be generated with the new assemble directives. It will make them clear and easy to update. Also, we need...

update file `crawlers-user-agents.data`

4

There is no information on where this list comes from. We need to get some sources and update the list. This looks like a good place to start: https://github.com/JayBizzle/Crawler-Detect ([other...