#coreruleset — Public Fediverse posts

@DrewNaylor Hi! False-positives can happen in any web application firewall, but we try to keep them to a minimum in CRS (the most popular rule set for ModSecurity). Feel free to ask if you need help with tuning — the team is on Slack, and I check messages here from time to time.

You can also learn more about false positives in #coreruleset in the documentation, and in this blog article. More documentation is coming soon as well.

https://coreruleset.org/docs/1-getting-started/

https://coreruleset.org/20250415/false-negatives-false-positives-how-the-crs-team-decide-when-to-add-or-modify-rules-and-when-we-decide-not-to-add-them/

A story about looking at the effectiveness of web application firewalls and finding bypasses for the filter ruleset. https://www.pentagrid.ch/en/blog/airlock-web-application-firewall-ruleset-testing-and-waf-bypasses/ #WAF #OWASP #coreruleset #ergon #airlock

A story about looking at the effectiveness of web application firewalls and finding bypasses for the filter ruleset. https://www.pentagrid.ch/en/blog/airlock-web-application-firewall-ruleset-testing-and-waf-bypasses/ #WAF #OWASP #coreruleset #ergon #airlock

A story about looking at the effectiveness of web application firewalls and finding bypasses for the filter ruleset. https://www.pentagrid.ch/en/blog/airlock-web-application-firewall-ruleset-testing-and-waf-bypasses/ #WAF #OWASP #coreruleset #ergon #airlock

A story about looking at the effectiveness of web application firewalls and finding bypasses for the filter ruleset. https://www.pentagrid.ch/en/blog/airlock-web-application-firewall-ruleset-testing-and-waf-bypasses/ #WAF #OWASP #coreruleset #ergon #airlock

A story about looking at the effectiveness of web application firewalls and finding bypasses for the filter ruleset. https://www.pentagrid.ch/en/blog/airlock-web-application-firewall-ruleset-testing-and-waf-bypasses/ #WAF #OWASP #coreruleset #ergon #airlock

@lemeteore I highly recommend #modsecurity web application firewall, and the #coreruleset for it. You’ve got a number of other great suggestions as well!

Exciting news in the web application security world: the #ModSecurity #WAF project is officially changing hands and moving under the #OWASP umbrella. It will become a community-driven free and open-source project once again! And, best of all, it will now live alongside the OWASP #CRS (formerly #CoreRuleSet), the de-facto set of open-source WAF rules. Having it all in one place will be very beneficial to both projects! https://owasp.org/blog/2024/01/09/ModSecurity.html

I recently got to do an interview as part of the #OWASP #CoreRuleSet project 😀 The idea is 'meet the people behind the code'. We're a cool open source project run by a fun bunch of real people, honest! 😅​ Check out the other developer portraits, too! 🕺 https://coreruleset.org/20231109/meet-the-crs-team-andrew-the-technical-writer-who-loves-eurovision-and-doom-ii/ #FOSS #WAF #CRS #opensource #security