CHANGES - CORE :
- increased PCRE output vector from 6 to 30 (from 2 match groups to 10)
- removed negative rule on content-types (naxsi_core.rules) as naxsi supports json
- Fixed broken EXLOG on |NAME match zones (issues/110)
- Integrated libinjection (xss/sqli)
CHANGES - NXAPI :
- Add of coordonates to ES and country
- Refuse to tag events without server name
- Support of global_deny_rules and deny_rules
- Support for regex in filters
Minimal documentation for those wishing to try libinjection :
Libinjection is integrated as internal rules increasing $LIBINJECTION_XSS and/or $LIBINJECTION_SQL by 4 at match. libinjection will be disabled by default, and needs to be turned on using either directives LibInjectionXss / LibInjectionSql or by using dynamic modifiers $naxsi_flag_libinjection_xss / $naxsi_flag_libinjection_sql. libinjection_sql/xss can ofc be whitelisted by their IDs (libinjection_sql = 17 / libinjection_xss = 18)