-
Our `coraza.conf-recommended` file is including the following line:
```
SecRequestBodyNoFilesLimit 131072
```
As far as I can see, we are actually [just reading the parameter](https://github.com/c…
-
When running coraza-spoa in an environment like Kubernetes, handling SIGTERM becomes important for zero-downtime upgrades. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#…
-
Hi,
I'm currently trying to configure the WAF to apply to all paths (/*) for an app, but always seems to end up in faulty configuration, only protecting a specific path (SecRule) or the below erro…
-
### Describe the bug
We need to agree on a consistent way to reference multi-byte characters in regular expression patterns (and we can enforce this via `rules-check.py`.)
Our current approach t…
-
Any chance this plugin can be used together with this caddy plugin?
https://github.com/corazawaf/coraza-caddy
-
Currently, for both request and response bodies, we are relying on two different buffers:
- Envoy buffer: Calling [`return types.ActionPause`](https://github.com/corazawaf/coraza-proxy-wasm/blob/main…
-
The modsecurity documentation says I should be able to get audit logs in JSON format with `SecAuditLogFormat json`.
Is this supposed to work with proxy-wasm? I still get logs in the native format w…
-
NGINX has a new [ngx_wasm_module](https://github.com/Kong/ngx_wasm_module), which aims to implement proxy-wasm ABI. I did try out `coraza-proxy-wasm` with the module and found that it doesn't work.…
-
We can borrow some ideas from https://github.com/corazawaf/coraza-proxy-wasm/tree/main/.github
-
*Description*:
Add WAF support. The implementation should focus on [coraza-proxy-wasm](https://github.com/corazawaf/coraza-proxy-wasm) but allow other WAF solutions in the future.
- [ ] Create a d…