Top owasp-modsecurity-crs issues

Rule 921160 matches with empty lines and looks for non-existing HTTP headers

False Positive
mentalstring picture mentalstring·13 Nov 2017·10 Comments

False positive on 200004 MULTIPART_UNMATCHED_BOUNDARY

elexisvenator picture elexisvenator·29 Jun 2017·3 Comments

FP on 941120 (XSS Filter - Category 2: Event Handler Vector)

False Positive
jhaar picture jhaar·3 Jan 2017·12 Comments
👍1

Allow JSON requests

synonymous1984 picture synonymous1984·24 Nov 2016·18 Comments

Seek Best Practices Accreditation

csanders-git picture csanders-git·10 Aug 2016·10 Comments

overly broad scanners matching

ygrek picture ygrek·14 Jul 2016·7 Comments

Add base64 decoding for some rules

Feature Request
lifeforms picture lifeforms·18 Jun 2016·50 Comments

FP 942100 MySQLi rule triggered?

False Positive libinjection
jeremyjpj0916 picture jeremyjpj0916·5 Mar 2020·3 Comments

ReDoS meeting agenda - Apr 29

Meeting Agenda
lifeforms picture lifeforms·26 Apr 2019·6 Comments

900600 doesn't do anything and when turning on logging it gives error

Need more info
geekteq picture geekteq·5 Mar 2019·13 Comments
 Previous issues
Next issues