All pull requests

Pull requests

• docs(security): score exploitability preconditions during triage

  #1722·fzipi opened Sep 26, 2026Member·

  ·
  4

• chore: add .coderabbit.yaml with organization inheritance

  #1721·fzipi opened Sep 25, 2026Member·

  ·
  2

• fix(http): preserve redirect and drop interruptions in net/http connector

  #1719·fzipi with CopilotAI opened Sep 22, 2026·

  ·
  1

  3

  

• feat(bodyprocessors): parse XML file parts of a multipart body

  #1716·victorserbu2709 opened Sep 7, 2026·

  ·
  8

• docs(adr): proposed record for REQUEST_BODY when a processor ran

  #1715·fzipi opened Sep 6, 2026Member·

  ·
  6

• docs(variables): correct XML SecLang example and note REQUEST_XML alias

  #1713·fzipi opened Sep 3, 2026Member·

  ·
  6

• test: make the declarative harness expressive enough to stop duplicating coverage

  #1711·jptosso opened Sep 3, 2026Member·

  ·
  2

• chore(deps): update module golang.org/x/crypto to v0.56.0 [security]

  breakingsecurity
  #1709·renovate[bot] opened Sep 3, 2026Bot·

  ·
  3

• fix: set URLENCODED_ERROR for malformed encoding

  #1697·justadityaraj opened Aug 28, 2026·

  ·
  1

  12

• [draft] fix(corazawaf): key the transformation cache by value identity

  #1682·M4tteoP opened Aug 12, 2026Member·

  ·
  3

• fix(corazawaf): reset the transformation cache when a transaction leaves the pool

  #1680·myconciergerieavelizy-cloud opened Aug 10, 2026·

  ·
  4

• fix: defer msg/logdata macro expansion to match time, eliminating spurious warnings

  #1679·fzipi with CopilotAI opened Aug 8, 2026·

  ·
  1

  1

  

• fix: treat CR, CRLF and FF as line continuations in cssDecode

  #1677·UlikGames opened Aug 2, 2026·

  ·
  1

  7

• chore: uses require for tests instead of plain testing library.

  #1673·jcchavezs opened Jul 27, 2026Member·

  ·
  7

• feat: optimize ipMatch, ipMatchFromFile and ipMatchFromDataset using bitwise Radix Trie

  #1650·Aditya-9-6 opened Jul 24, 2026·

  ·
  13

• perf: index RuleGroup's rule IDs to avoid quadratic compilation compl…

  #1645·racheedevel opened Jul 21, 2026·

  ·
  1

  8

• feat(auditlog): add libmodsecurity v3 JSON formatter.

  #1638·slg95 opened Jul 15, 2026·

  ·
  1

  11

• chore: adds CRS to http-server example

  #1632·M4tteoP opened Jul 9, 2026Member·

  ·
  3

• Add regression coverage for _abck cookie indexing and targeted ctl exclusions

  #1621·fzipi with CopilotAI opened May 18, 2026·

  ·
  1

  6

  

• feat(experimental): pluggable TelemetrySink interface for engine events

  #1616·jptosso opened Apr 24, 2026Member·

  ·
  17

• feat(operators): implement Snort data syntax support for @pm

  #1604·fzipi with CopilotAI opened Apr 6, 2026·

  ·
  1

  8

  

• feat: add StreamingBodyProcessor interface and per-record evaluation

  #1596·fzipi opened Apr 5, 2026Member·

  ·
  29

• feat: experimental xmlquery body processor with lazy XPath

  #1594·fzipi opened Apr 4, 2026Member·

  ·
  14

• perf: pre-compute lowercase keys to avoid redundant ToLower calls

  #1531·jptosso opened Mar 6, 2026Member·

  ·

  · v3.4 release
  15

• fix: goroutine leak and add IP validation in RBL operator

  #1520·jptosso with CopilotAI opened Mar 6, 2026·

  ·
  1

  5