github corazawaf/coraza-nginx v0.11.0

9 hours ago

0.11.0 (2026-04-16)

Features

  • add Debian packaging (fd75748)
  • add Debian packaging (e014c2c)
  • add go-ftw e2e tests (f343fcd)
  • add go-ftw e2e tests (6381b71), closes #33
  • handle unix domain sockets in connection info (8b101be)
  • handle unix domain sockets in connection info (a6b9175)

Bug Fixes

  • address review feedback on go-ftw CI step (9a7525e)
  • always run phase 4 rules even when body inspection is disabled (d3fe533)
  • debug mode compilation errors (CORAZA_DDEBUG=1) (20a0924)
  • match pidfile path with nginx-test.conf (/tmp/nginx.pid) (3643cfe)
  • require coraza_is_response_body_processable (libcoraza >= 1.4.0) (d8c121f)
  • skip response body inspection when SecResponseBodyAccess is Off (c118201)
  • stop routing response bodies through Go FFI when body inspection is disabled (9d5c083)
  • use command injection payload for GET RCE test, add 405 fallback to all locations (c2dab85)

Don't miss a new coraza-nginx release

NewReleases is sending notifications on new releases.