-
### Description
To better test or use Apisix's, it is recommended to add the curl directive to the Docker image:
**apache/apisix:3.9.0-debian**
So, Users could use curl add routes to APISIX…
-
### The following program `sample.go` triggers an unexpected result
```go
package main
// yaegi:tags purego
import (
"fmt"
"github.com/corazawaf/coraza/v3"
)
func main()…
-
```txt
{"level":"info","ts":1700875769.2244117,"msg":"using provided configuration","config_file":"/etc/caddy/Caddyfile","config_adapter":"caddyfile"}
Error: adapting config using caddyfile: parsing…
-
I am currently trying to implement the coraza plugin into traefik, which sits behind a cloudflare tunnel for external access.
As soon as I activate the middleware for the services traefik starts us…
-
## Summary
Do you want to engage with Coraza but don't know where to start? This is the perfect issue for you!
Let's add support for `SecArgumentSeparator` setting. This should be set in the `co…
fzipi updated
3 weeks ago
-
I am unable to use `Include @coraza.conf-recommended` because setting `SecRequestBodyAccess On` seems to break all POST requests and they return error 500 and some gibberish response.
Testing with …
-
Hello,
Whilst working with the most recent version (v2) of this module, I observed that the handle_errors directive is no longer functional with the 403 code initiated by the WAF. However, in the v…
-
I'm currently using Caddy server with the coraza module for web application firewall (WAF) capabilities. I've configured Caddy to remove the Server header using the header directive, but it seems that…
to-kr updated
1 month ago
-
Given the following error:
```
Apr 29 17:00:20 caddy caddy[468]: {"level":"error","ts":1714410020.510198,"logger":"http.handlers.waf","msg":"[client \"[2a03:...]\"] Coraza: Warning. Request conten…
-
## Description
In Deny mode the WAF seems to correctly handle the `allow` action, and after triggering an `allow` rule other rules in the same and subsequent phases are ignored and not triggered. I…