github corazawaf/coraza v3.1.0
Version 3.1.0

3 months ago

This is a new minor version release with emphasis in improving the overall logging experience, fixes for interoperability of the http middleware with other middlewares, better defaults, various fixes and a few new features like the uppercase transformation, the raw body processor (both thanks to @blotus) and a way to pass a context into a transaction to be later retrieved the error log callback.

What's Changed

  • chore: improve GetField logic by @jptosso in #897
  • chore: setvar minor fix, tests, added warning when missing variable, deprecates usage of tx.LogData by @M4tteoP in #892
  • chore: fixes audit log. by @jcchavezs in #889
  • fix http.Flusher and io.ReaderFrom implementation by @romainmenke in #923
  • fix: stack overflow in ReadFrom by @romainmenke in #925
  • fix: Disables implicit Cookies url decoding by @M4tteoP in #928
  • feat: add uppercase transformation by @blotus in #935
  • fix: parse multiple cookies with spaces by @fzipi in #943
  • fix: more forgiving base64 transformation [custom implementation] by @M4tteoP in #944
  • fix: filling variables struct to complete audit info by @CArellanoOrbik in #968
  • feat: adds context to transaction. by @jcchavezs in #963
  • feat: improves logging. by @jcchavezs in #971
  • feat: add raw body processor by @blotus in #983
  • chore: updates CRS tests to CRS 4.0.0-rc2 by @M4tteoP in #899
  • fix(seclang): merge chained raw rules by @jptosso in #985
  • fix: BodyLimit related documented default values, default RequestBodyLimitAction, adds some tests by @M4tteoP in #895
  • chore: Go 1.20 as minimum supported version by @jcchavezs in #996
  • chore: upgrades go-ftw to 0.6.4. by @jcchavezs in #998

New Contributors (thanks a lot!)

Full Changelog: v3.0.4...v3.1.0

Don't miss a new coraza release

NewReleases is sending notifications on new releases.