search

corazawaf / coraza

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
https://www.coraza.io
Apache License 2.0
2.25k stars 222 forks source link

Monthly meeting agenda (April 2022) #211

Closed jptosso closed 2 years ago

jptosso commented 2 years ago

Current agenda

  1. Project status
  2. CRS compatibility status
  3. Lua support
  4. C (libcoraza) status

How to join?

  1. Join OWASP slack: https://owasp.org/slack/invite
  2. Join #coraza channel: https://owasp.slack.com/archives/C02BXH135AT
jptosso commented 2 years ago

  1. Project status

    • We are reviewing GSOC applications for our three projects, GraphQL, coraza-server, and rate limiting
    • Changes:

      • 234 utf8 RX compatibility issues

      • 232 include directive support

      • 220 rule matching optimization

      • 219 fix force request body, now it works

      • 214 fix RX capture

    • @piyushroshan joined the coraza core team

  2. CRS compatibility issues We have fixed at least 3 bugs related to CRS compatibility, we should try to fix this by this week

  3. Lua compatibility is coming as a plugin

  4. The C wrappers (libcoraza) are undergoing tests, we are still having issues with the garbage collection. We are also having problems with the log callback function.