Allow CoreRuleSet version spec in WAF config

solo-io / gloo

The Feature-rich, Kubernetes-native, Next-Generation API Gateway Built on Envoy

https://docs.solo.io/

Apache License 2.0

4.06k stars 432 forks source link

Allow CoreRuleSet version spec in WAF config #5698

Open jameshbarton opened 2 years ago

jameshbarton commented 2 years ago

Is your feature request related to a problem? Please describe. WAF users want to upgrade to more recent CoreRuleSet versions, without waiting for a Gloo Edge product version update. This is especially true in the wake of exploits like Log4Shell, where the CRS is evolving rapidly.

Describe the solution you'd like Allow users to configure a CoreRuleSet version.

Additional context Related: #4632

github-actions[bot] commented 2 months ago

This issue has been marked as stale because of no activity in the last 180 days. It will be closed in the next 180 days unless it is tagged "no stalebot" or other activity occurs.