search

corazawaf / coraza-spoa

EXPERIMENTAL: A wrapper around the OWASP Coraza WAF for HAProxy's SPOE filters
Apache License 2.0
74 stars 16 forks source link

Return 'hit' fail value through processInterruption #71

Open jcrood opened 1 year ago

jcrood commented 1 year ago

Return the missing fail variable in case of a hit. It's more consistent and makes the haproxy config examples actually work. E.g. this bit:

http-request deny if { var(txn.coraza.fail) -m int eq 1 }
http-response deny if { var(txn.coraza.fail) -m int eq 1 }