| react-profiling | 0 |
| react-import-map | react,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf |
| route-pattern | /:user_id/:repository/issues(.:format) |
| route-controller | issues |
| route-action | index |
| fetch-nonce | v2:a2c0eea6-351a-bf56-65c5-b65de188dd54 |
| current-catalog-service-hash | 81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114 |
| request-id | E416:961BA:1442FD:19F587:6AEBD155 |
| html-safe-nonce | 6fdeda0a05978262caf48b002b34307e4201e9d894412e5b4520a476b281ae1d |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFNDE2Ojk2MUJBOjE0NDJGRDoxOUY1ODc6NkFFQkQxNTUiLCJ2aXNpdG9yX2lkIjoiNjE4MDYzNzc0NDIxMzQwNTAxIiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0= |
| visitor-hmac | 6fe4adb6c3a819a5d1887423192eaa3be1ced7663dd473d178da42b584bb9f59 |
| hovercard-subject-tag | repository:1320594 |
| github-keyboard-shortcuts | repository,issues,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///issues/index |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/owasp-modsecurity/ModSecurity/issues |
| twitter:image | https://opengraph.githubassets.com/021e264e453369531c2b0e4416e7480c54f11e63c50a98941cfdf9617c063d7c/owasp-modsecurity/ModSecurity |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/021e264e453369531c2b0e4416e7480c54f11e63c50a98941cfdf9617c063d7c/owasp-modsecurity/ModSecurity |
| og:image:alt | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a rang... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 97b204e1babd5581d0c4d4f3dc7d4a484f3d9fef013d4bc1be57692ba0aeb6f5 |
| turbo-cache-control | no-cache |
| go-import | github.com/owasp-modsecurity/ModSecurity git https://github.com/owasp-modsecurity/ModSecurity.git |
| octolytics-dimension-user_id | 157431874 |
| octolytics-dimension-user_login | owasp-modsecurity |
| octolytics-dimension-repository_id | 1320594 |
| octolytics-dimension-repository_nwo | owasp-modsecurity/ModSecurity |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 1320594 |
| octolytics-dimension-repository_network_root_nwo | owasp-modsecurity/ModSecurity |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | ee820e8271e2dd5c53dba22e928915edb9795b69 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| react-app-name | issues |
| Skip to content | https://github.com/SpiderLabs/ModSecurity/issues#start-of-content |
| https://github.com/ |
| Sign in | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fowasp-modsecurity%2FModSecurity%2Fissues |
| GitHubRepository hosting, code review, and collaboration | https://github.com/platform |
| CopilotAI coding agent for tasks, projects and automated work | https://github.com/features/copilot |
| ActionsCI/CD and automation | https://github.com/features/actions |
| Code QualityQuality analysis, fixes, and enforcement | https://github.com/features/code-quality |
| CodespacesCloud development environments | https://github.com/features/codespaces |
| Code SecurityVulnerability detection and remediation | https://github.com/security/advanced-security/code-security |
| Secret ProtectionSecret scanning and leak prevention | https://github.com/security/advanced-security/secret-protection |
| All Features | https://github.com/features |
| Documentation | https://docs.github.com/en |
| Training | https://learn.github.com/skills |
| Certifications | https://learn.github.com/credentials |
| Build with Copilot | https://github.com/features/ai |
| Customize Copilot | https://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview |
| Integrations | https://github.com/marketplace |
| Trending repos | https://github.com/trending |
| GitHub Sponsors | https://github.com/open-source/sponsors |
| Developer articles | https://github.com/resources/articles |
| ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place. | https://github.blog/changelog/ |
| Enterprises | https://github.com/enterprise |
| Team | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| See all industries | https://github.com/solutions/industry |
| Why GitHub | https://github.com/why-github |
| Customer Stories | https://github.com/customer-stories |
| Business insights | https://github.com/solutions/executive-insights |
| Trust Center | https://github.com/trust-center |
| GitHub Advanced SecurityEnterprise-grade code security | https://github.com/security/advanced-security |
| Copilot for businessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Documentation | https://docs.github.com/en |
| Resource center | https://github.com/resources |
| Blog | https://github.blog/ |
| Events & webinars | https://github.com/resources/events |
| Community Forum | https://github.com/orgs/community/discussions |
| Customer Stories | https://github.com/customer-stories |
| Integrations | https://github.com/marketplace |
| Customer support | https://help.github.com/ |
| Training | https://learn.github.com/skills |
| GitHub Status | https://www.githubstatus.com/ |
| About | https://github.com/about |
| Partners | https://github.com/partners |
| Changelog | https://github.blog/changelog/ |
| GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub. | https://githubuniverse.com/ |
| Pricing | https://github.com/pricing |
| Sign in | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fowasp-modsecurity%2FModSecurity%2Fissues |
| Sign up | https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fissues%2Findex&source=header-repo&source_repo=owasp-modsecurity%2FModSecurity |
| Reload | https://github.com/SpiderLabs/ModSecurity/issues |
| Reload | https://github.com/SpiderLabs/ModSecurity/issues |
| Reload | https://github.com/SpiderLabs/ModSecurity/issues |
| owasp-modsecurity | https://github.com/owasp-modsecurity |
| ModSecurity | https://github.com/owasp-modsecurity/ModSecurity |
| Code | https://github.com/owasp-modsecurity/ModSecurity |
| Issues240 (240) | https://github.com/owasp-modsecurity/ModSecurity/issues |
| Pull requests143 (143) | https://github.com/owasp-modsecurity/ModSecurity/pulls |
| Actions | https://github.com/owasp-modsecurity/ModSecurity/actions |
| Projects | https://github.com/owasp-modsecurity/ModSecurity/projects |
| Wiki | https://github.com/owasp-modsecurity/ModSecurity/wiki |
| Security and quality17 (17) | https://github.com/owasp-modsecurity/ModSecurity/security |
| Insights | https://github.com/owasp-modsecurity/ModSecurity/pulse |
| https://github.com/owasp-modsecurity/ModSecurity |
| Issues | https://github.com/owasp-modsecurity/ModSecurity/issues?q=is%3Aissue+state%3Aopen |
| Assigned to me | https://github.com/owasp-modsecurity/ModSecurity/issues?q=is%3Aissue+state%3Aopen+assignee%3A%40me |
| Created by me | https://github.com/owasp-modsecurity/ModSecurity/issues?q=is%3Aissue+state%3Aopen+author%3A%40me |
| Mentioned | https://github.com/owasp-modsecurity/ModSecurity/issues?q=is%3Aissue+state%3Aopen+mentions%3A%40me |
| Recent activity | https://github.com/owasp-modsecurity/ModSecurity/issues?q=is%3Aissue+updated%3A%3E%40today-1w+sort%3Aupdated-desc |
| Views | https://github.com/owasp-modsecurity/ModSecurity/issues/views |
| Projects | https://github.com/owasp-modsecurity/ModSecurity/projects |
| Milestones | https://github.com/owasp-modsecurity/ModSecurity/milestones |
| Labels | https://github.com/owasp-modsecurity/ModSecurity/labels |
| FeedbackPreview | https://gh.io/issues-sidebar-feedback |
| New issue | https://github.com/login?return_to=https://github.com/owasp-modsecurity/ModSecurity/issues |
| Open240 (240) | https://github.com/SpiderLabs/ModSecurity/issues |
| Closed | https://github.com/SpiderLabs/ModSecurity/issues |
| %{RULE.*} expands to an empty string in tag and some other actions and operator parameters | https://github.com/owasp-modsecurity/ModSecurity/issues/3742 |
| v3: a misspelled operator that starts with a valid operator name is silently parsed as that operator | https://github.com/owasp-modsecurity/ModSecurity/issues/3741 |
| Fix transformation factory name validation and empty action payload handling | https://github.com/owasp-modsecurity/ModSecurity/issues/3740 |
| Lua m.getvar()/m.getvars(): long transformation tables crash, and "none" doesn't reset in v3 | https://github.com/owasp-modsecurity/ModSecurity/issues/3737 |
| Support nested RULE macros in RULE.msg and RULE.logdata with safe recursion handling | https://github.com/owasp-modsecurity/ModSecurity/issues/3735 |
| %{RULE.*} expands to an empty string in SecAction and SecRuleScript | https://github.com/owasp-modsecurity/ModSecurity/issues/3733 |
| v3: Lua m.setvar() returns -1 on errors, so the script gets stack garbage | https://github.com/owasp-modsecurity/ModSecurity/issues/3731 |
| v2: !@validateHash matches when the regex fails (same as #3123) | https://github.com/owasp-modsecurity/ModSecurity/issues/3710 |
| v3: "General failure, action: 0x..." prints a pointer instead of the action name | https://github.com/owasp-modsecurity/ModSecurity/issues/3708 |
| v3: setvar added by SecRuleUpdateActionById to a chain starter only runs on full chain match | https://github.com/owasp-modsecurity/ModSecurity/issues/3707 |
| escapeSeqDecode transformation missing support for ANSI-C unicode encoding | https://github.com/owasp-modsecurity/ModSecurity/issues/3701 |
| Multipart: data after the final boundary in a later chunk sets MULTIPART_DATA_BEFORE instead of MULTIPART_DATA_AFTER | https://github.com/owasp-modsecurity/ModSecurity/issues/3695 |
| DURATION measures process CPU time in seconds, not elapsed transaction time in milliseconds | https://github.com/owasp-modsecurity/ModSecurity/issues/3694 |
| v2: t:utf8toUnicode drops the last hex digit of code points above U+FFFF (regression since 2.9.9) | https://github.com/owasp-modsecurity/ModSecurity/issues/3684 |
| v2: msc_xml.c prints libxml2 errors to stderr and discards the parse reason | https://github.com/owasp-modsecurity/ModSecurity/issues/3680 |
| XML body processor: surface libxml2's parse error in REQBODY_ERROR_MSG and the debug log | https://github.com/owasp-modsecurity/ModSecurity/issues/3678 |
| Internal error codes are bare negative integers without names or messages (v2 and v3) | https://github.com/owasp-modsecurity/ModSecurity/issues/3655 |
| IIS: IPv6 link-local client addresses break IP matching ("IPmatch: bad IPv6 specification") | https://github.com/owasp-modsecurity/ModSecurity/issues/3630 |
| IIS: ReadFileChunk allocates only 1 byte but reads m_dwPageSize (latent overflow) | https://github.com/owasp-modsecurity/ModSecurity/issues/3623 |
| IIS: Host header fallback is dead code (r->hostname == NULL can never be true) | https://github.com/owasp-modsecurity/ModSecurity/issues/3621 |
| IIS: Content-Length header corrupted/truncated for large responses (wrong printf format + off-by-one buffer size) | https://github.com/owasp-modsecurity/ModSecurity/issues/3619 |
| IIS connector: audit log F part always shows '500 Internal Server Error' for normal traffic | https://github.com/owasp-modsecurity/ModSecurity/issues/3612 |
| multipart C-T header validation - false positive (rule id 200002, Multiple boundary parameters) | https://github.com/owasp-modsecurity/ModSecurity/issues/3610 |
| libModSecurity3: REQUEST_HEADERS names are treated as case sensitive with configure-time rule-exclusions | https://github.com/owasp-modsecurity/ModSecurity/issues/3609 |
| Windows build fails: yajl's Conan recipe sets CMP0026 OLD, incompatible with newer CMake | https://github.com/owasp-modsecurity/ModSecurity/issues/3604 |
| Previous | https://github.com/owasp-modsecurity/ModSecurity/issues?q=is%3Aissue+state%3Aopen |
| 1 | https://github.com/owasp-modsecurity/ModSecurity/issues?q=is%3Aissue+state%3Aopen |
| 2 | https://github.com/owasp-modsecurity/ModSecurity/issues?q=is%3Aissue+state%3Aopen&page=2 |
| 3 | https://github.com/owasp-modsecurity/ModSecurity/issues?q=is%3Aissue+state%3Aopen&page=3 |
| 4 | https://github.com/owasp-modsecurity/ModSecurity/issues?q=is%3Aissue+state%3Aopen&page=4 |
| 5 | https://github.com/owasp-modsecurity/ModSecurity/issues?q=is%3Aissue+state%3Aopen&page=5 |
| 6 | https://github.com/owasp-modsecurity/ModSecurity/issues?q=is%3Aissue+state%3Aopen&page=6 |
| 7 | https://github.com/owasp-modsecurity/ModSecurity/issues?q=is%3Aissue+state%3Aopen&page=7 |
| 10 | https://github.com/owasp-modsecurity/ModSecurity/issues?q=is%3Aissue+state%3Aopen&page=10 |
| Next | https://github.com/owasp-modsecurity/ModSecurity/issues?q=is%3Aissue+state%3Aopen&page=2 |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |