-
update nginx to v1.25.4, including fixes of CVEs, see https://nginx.org/en/CHANGES and https://nginx.org/en/security_advisories.html
-
update coreruleset to v4.0.0, please update the crs-setup.conf:
- Backup your
/opt/npmplus/etc/modsecurity/crs-setup.conf
file and delete it - restart NPMplus
- apply the changes you previously made to the backuped crs-setup.conf to the new crs-setup.conf
- Backup your
-
you can now add plugins to coreruleset, see here: https://github.com/ZoeyVid/NPMplus#coreruleset-plugins
-
Update 1: I've also added an option to disable proxy_buffering
-
Update 2: closed #649
Full Changelog: 2024-02-12-r1...2024-02-14-r1