github corazawaf/coraza-nginx v0.23.0

3 hours ago

0.23.0 (2026-10-15)

Bug Fixes

  • bind the transaction to the final location after rewrites (#150) (559c302)
  • block every disruptive intervention, including bare drop and deny,status:200 (#145) (95d9fe1)
  • correct the debug connection-lookup check and remove stale debug artifacts (#159) (9d26764)
  • do not show rules the 204 headers nginx strips (#169) (b91389a)
  • finalise phase 4 before the headers of bodyless 204/304 and header_only responses (#144) (a291162)
  • finalise phase 4 for bodyless responses in both delay modes (#168) (dd55c07)
  • inspect response headers after gzip and range have run (#155) (a5afa73)
  • preserve the sync flag on delayed buffer copies (#154) (8432b50)
  • publish the request context only after construction succeeds (#146) (29c8a94)
  • replace existing Location headers on a policy redirect (#153) (9bcdc13)

Miscellaneous Chores

Don't miss a new coraza-nginx release

NewReleases is sending notifications on new releases.