github corazawaf/coraza-nginx v0.9.0

12 hours ago

0.9.0 (2026-02-28)

Features

  • ci: change names and add automated build (5bd81f3)
  • ci: change names and add automated build (d02394c)
  • coraza-nginx with working tests (774b496)
  • full coraza-nginx rework — config inheritance, dlopen wrapper, bug fixes (c0f3b6c)
  • transaction ID tracking and access denied logging (fcc5551)

Bug Fixes

  • adapt tests for Coraza compatibility (d24a47c)
  • address review feedback (eec1d9c)
  • check body limit intervention before processing rules (95479e4)
  • config inheritance for locations without rules (0c4806c)
  • config syntax (7e5b812)
  • delay response headers until phase 4 body inspection completes (6f60f15)
  • delay response headers until phase 4 body inspection completes (95b9c5b)
  • dlopen libcoraza after fork to avoid Go runtime deadlock (e3cd8c6)
  • Dockerfile prove runs only coraza tests (2f53dc4)
  • Dockerfile test runner (b77a9da)
  • enable passing tests and fix audit log assertions (a609d97)
  • intervention memory leaks (8ae8f72)
  • ngx_str_to_char pass pointer by reference (093eec4)
  • second pass changing names and main module (a746b53)
  • second pass changing names and main module (d381f1a)
  • set intervention_triggered flag consistently (e38a4a7)
  • tests (4fd9b30)
  • update dockerfile (b0c6a27)
  • update header comment (4e8621e)
  • use ppomes/libcoraza fork with working rules_merge (86063cc)

Miscellaneous Chores

Don't miss a new coraza-nginx release

NewReleases is sending notifications on new releases.