Skip to content

feat: start porting modsecurity rules - #1838

Open
Xe wants to merge 7 commits into
mainfrom
Xe/modsecurity-filepaths
Open

Xe wants to merge 7 commits into
mainfrom
Xe/modsecurity-filepaths

Conversation

@Xe

@Xe Xe commented Aug 8, 2026

Copy link
Copy Markdown
Contributor

This is a long-standing white whale for me.

OWASP publishes a set of WAF rules called the OWASP Core Rule Set. I've wanted to make Anubis support these rules for a while. This requires expanding the policy engine, so as the modsecurity support improves, the policy engine will have to improve too.

Checklist:

  • Added a description of the changes to the [Unreleased] section of docs/docs/CHANGELOG.md
  • Added test cases to the relevant parts of the codebase
  • Ran integration tests npm run test:integration (unsupported on Windows, please use WSL)
  • All of my commits have verified signatures

Xe added 7 commits August 8, 2026 11:51
Signed-off-by: Xe Iaso <me@xeiaso.net>
Signed-off-by: Xe Iaso <me@xeiaso.net>
Signed-off-by: Xe Iaso <me@xeiaso.net>
I realize the irony in testing the AI agent rule first, however out of
the rules I have ported right now it is the semantically simplest one.

Signed-off-by: Xe Iaso <me@xeiaso.net>
Signed-off-by: Xe Iaso <me@xeiaso.net>
@Xe Xe self-assigned this Aug 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant