Repository Issue Activity (beta)

#3370 Readme instructions for IIS installation

#3131 @rbl operator does not support IPv6

#3623 IIS: ReadFileChunk allocates only 1 byte but reads m_dwPageSize (latent overflow)

#3621 IIS: Host header fallback is dead code (r->hostname == NULL can never be true)

#3619 IIS: Content-Length header corrupted/truncated for large responses (wrong printf format + off-by-one buffer size)

#3308 Drop YAJL dependency

#3609 libModSecurity3: REQUEST_HEADERS names are treated as case sensitive with configure-time rule-exclusions

#3601 Partial Log Forging in RuleMessage::log() via Unescaped Quote Characters in Request-Derived Fields

#3590 GnuTLS after many apache reloads

#3612 IIS connector: audit log F part always shows '500 Internal Server Error' for normal traffic

#3610 multipart C-T header validation - false positive (rule id 200002, Multiple boundary parameters)

#3604 Windows build fails: yajl's Conan recipe sets CMP0026 OLD, incompatible with newer CMake

#3599 x86 IIS module in CI-built MSI fails to load - fuzzy.dll missing MinGW runtime DLLs (error 126)

#3446 ModSecurity v2.9.12 “Skipping request since there is nowhere to write to” despite valid SecAuditLog configuration

#3608 False postivie (Wordpress + plugin AIOSEO)

#3585 ModSecurity GET: SQLi bypass via scalar-expression and operator rewrites

#3587 ModSecurity POST: SQLi bypass via request-body predicate/operator rewrites

#3295 Operator @rx has different flags in two engines

#3598 Setting size expectations for `lib`

#3591 ctl:ruleRemoveTargetByTag / ruleRemoveTargetById does not remove XPath attribute target (XML://@*) on v2

#3584 Fix Failing to Match IPv6 Addresses@ipMatchFromFile

#1933 Updating RequestBodyNoFilesLimit at runtime (feature request)

#3588 @ipMatchFromFile and @ipMatch code (same code in v2 & v3) becomes buggy from a certain number of IP.

#3565 ctl:ruleRemoveTarget* rejects any target containing `@` (e.g. XPath attribute selectors)

#3586 ModSecurity GET(JSON): SQLi bypass via separator, literal, and annotation variants