mirror of
https://github.com/ADD-SP/ngx_waf.git
synced 2026-04-26 14:05:52 +03:00
[GH-ISSUE #101] Modsec is end-of-life. Alternate way to add OWASP rules? #77
Labels
No labels
MacOS
Nginx
OpenResty
Tengine
bug
documentation
enhancement
needs-investigation
pull-request
question
stale
stale
stale
timeout
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/ngx_waf#77
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @binaryfire on GitHub (Jul 15, 2022).
Original GitHub issue: https://github.com/ADD-SP/ngx_waf/issues/101
Hello!
The Modsec project is EOL: https://www.trustwave.com/en-us/resources/security-resources/software-updates/end-of-sale-and-trustwave-support-for-modsecurity-web-application-firewall/
But the OWASP core rule set will continue to be developed: https://coreruleset.org/
Is there a way we can add OWASP rules (https://github.com/coreruleset/coreruleset/tree/v4.0/dev/rules) directlty to ngx_waf without Modsec?
@hibobmaster commented on GitHub (Jul 18, 2022):
ModSecurity is maintained by open-source community nowaday.
@stale[bot] commented on GitHub (Jul 25, 2022):
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
此 issue 因为最近没有任何活动已经被标记，如果在此之后的一段时间内仍没有任何活动则会被关闭。感谢您对项目的支持。
@stale[bot] commented on GitHub (Aug 1, 2022):
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
此 issue 因为最近没有任何活动已经被标记，如果在此之后的一段时间内仍没有任何活动则会被关闭。感谢您对项目的支持。
@stale[bot] commented on GitHub (Aug 14, 2022):
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
此 issue 因为最近没有任何活动已经被标记，如果在此之后的一段时间内仍没有任何活动则会被关闭。感谢您对项目的支持。
@GitarPlayer commented on GitHub (Aug 18, 2022):
Could it be possible to use this Go library https://github.com/corazawaf/coraza instead of Modsecurity 3 since it never passed the test suites of the CRS rule developers fully. I would love to help implement this.