Skip to content
This repository has been archived by the owner on May 14, 2020. It is now read-only.

Extending CHANGES file #614

Merged
merged 4 commits into from
Oct 15, 2016
Merged

Extending CHANGES file #614

Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
08a8680
Extending CHANGES file
dune73 Oct 13, 2016
6825cd9
typo
dune73 Oct 13, 2016
c85714a
"webscanners" -> "malicious webscanners"
dune73 Oct 13, 2016
43148c5
CHANGES: describe some more RC2 changes
lifeforms Oct 15, 2016
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 15 additions & 5 deletions CHANGES
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,14 +2,22 @@

== Report Bugs/Issues to GitHub Issues Tracker or the mailinglist ==
* https://github.com/SpiderLabs/owasp-modsecurity-crs/issues
or the CRS mailinglist at
or the CRS mailinglist at
* https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set


== Changes from 3.0.0-RC1 to 3.0.0-RC2 ==

* Fixed Apache 2.2 compatibility issue with long configuration lines.
* Added more unix commands to RCE rule (github user @emphazer).
* Panic with error 500 if the crs-setup.conf file is not loaded.
* Generic mechanism to support application specific rule exclusions
(Chaim Sanders)
* Initial Wordpress rule exclusions (Walter Hop)
* Initial Drupal rule exclusions (Christian Folini, @emphazer)
* Cleanup of reputation checks / persistent blocking
(Christina Folini / Walter Hop)
* Shortened overly long RegExes to work on Apache 2.2
* Support for HTTP/2 protocol in request line
* Updated list of webscanners
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm being picky but perhaps just add malicious webscanners

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, that's more precise. Thanks.



== Changes from 2.2.9 to 3.0.0-RC1 ==

Expand All @@ -34,7 +42,8 @@ This is a cursory summary of the most important changes:
* Consolidation of rules, namely XSS and SQLi (Spider Labs/Trustwave team)
* Sampling mode / Easing in (Christian Folini)
* Tags much more systematic (Walter Hop)
* IP Reputation checks (Spider Labs/Trustwave team)
* IP reputation checks / persistent blocking of certain clients
(Spider Labs/Trustwave team)
* Phase actions use request/response/logging now instead of
numerical phases (Spider Labs/Trustwave team)
* Added NoScript XSS Filters (Spider Labs/Trustwave team)
Expand Down Expand Up @@ -71,6 +80,7 @@ This is a cursory summary of the most important changes:
* Introduction of var for static resources (Chaim Sanders)
* Many improvements to rules in 2014/5 (Ryan Barnett)


== Version 2.2.9 - 09/30/2013 ==

Security Fixes:
Expand Down