Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: coreruleset/coreruleset
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v4.17.1
Choose a base ref
...
head repository: coreruleset/coreruleset
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v4.18.0
Choose a head ref
  • 20 commits
  • 58 files changed
  • 8 contributors

Commits on Aug 5, 2025

  1. chore: post-release v4.18.0-dev (#4226)

    Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
    fzipi authored Aug 5, 2025
    Configuration menu
    Copy the full SHA
    c677521 View commit details
    Browse the repository at this point in the history

Commits on Aug 11, 2025

  1. chore(deps): update owasp/modsecurity-crs:nginx docker digest to 6f62…

    …763 in tests/docker-compose.yml (#4233)
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Aug 11, 2025
    Configuration menu
    Copy the full SHA
    cfee9d1 View commit details
    Browse the repository at this point in the history
  2. chore(deps): update owasp/modsecurity-crs:apache docker digest to 553…

    …9826 in tests/docker-compose.yml (#4232)
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Aug 11, 2025
    Configuration menu
    Copy the full SHA
    2a186fe View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    500735c View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    70ad536 View commit details
    Browse the repository at this point in the history

Commits on Aug 13, 2025

  1. fix: fix linting of releases (#4228)

    Improve the detection of the version that the linter should use to check
    the `ver` tags. We now check for:
    - a version in the commit message: "...release...vx.y.z..."
    - a version in the branch name: ".../release/vx.y.z"
    - fall back to looking at the latest tag, as before
    
    Fixes #4227
    theseion authored Aug 13, 2025
    Configuration menu
    Copy the full SHA
    533fdef View commit details
    Browse the repository at this point in the history

Commits on Aug 14, 2025

  1. fix: remove dot star (#4235)

    Xhoenix authored Aug 14, 2025
    Configuration menu
    Copy the full SHA
    4f1ca4a View commit details
    Browse the repository at this point in the history
  2. fix: nginx test-override typo (#4237)

    Co-authored-by: Max Leske <250711+theseion@users.noreply.github.com>
    Xhoenix and theseion authored Aug 14, 2025
    Configuration menu
    Copy the full SHA
    e63bae3 View commit details
    Browse the repository at this point in the history

Commits on Aug 16, 2025

  1. [pre-commit.ci] pre-commit autoupdate (#4239)

    updates:
    - [github.com/pre-commit/pre-commit-hooks: v5.0.0 → v6.0.0](pre-commit/pre-commit-hooks@v5.0.0...v6.0.0)
    
    Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
    Co-authored-by: Felipe Zipitría <3012076+fzipi@users.noreply.github.com>
    pre-commit-ci[bot] and fzipi authored Aug 16, 2025
    Configuration menu
    Copy the full SHA
    e744002 View commit details
    Browse the repository at this point in the history

Commits on Aug 19, 2025

  1. fix(942370): remove dot star (#4234)

    * fix(942370): remove dot star
    
    * remove dot star
    
    * fix regex
    
    * update regex
    Xhoenix authored Aug 19, 2025
    Configuration menu
    Copy the full SHA
    b65d5e5 View commit details
    Browse the repository at this point in the history
  2. fix: avoid matching non-ruby errors and source code (#4224)

    * fix: avoid matching non-ruby errors and source code
    
    * apply suggestions from code review
    
    * typo
    
    * Apply suggestion from @Xhoenix
    
    Co-authored-by: Xhoenix <86168235+Xhoenix@users.noreply.github.com>
    
    ---------
    
    Co-authored-by: Xhoenix <86168235+Xhoenix@users.noreply.github.com>
    EsadCetiner and Xhoenix authored Aug 19, 2025
    Configuration menu
    Copy the full SHA
    6635989 View commit details
    Browse the repository at this point in the history

Commits on Aug 20, 2025

  1. fix: don't replace cmdline suffixes for 932220 and 932250 (#4231)

    * fix: don't replace cmdline suffixes for 932220 and 932250
    
    During the refactoring of the RCE rules and the "upto3" and "4andup"
    data files, rules 932220 and 932250 were changed to accidentally include
    data files without cmdline suffixes, even though both rules use the
    cmdline processor. This commit fixes both rules, making them process the
    cmdline suffixes as originally intended.
    
    * chore: apply review suggestions
    theseion authored Aug 20, 2025
    Configuration menu
    Copy the full SHA
    59ed32c View commit details
    Browse the repository at this point in the history

Commits on Aug 21, 2025

  1. feat: update unix commands list (#4215)

    * feat: update unix commands list
    
    * feat: update unix commands list
    
    * feat: update unix commands list
    
    * feat: update unix commands list
    
    * chore: update script to use crs-toolchain
    
    * chore: update script to use crs-toolchain
    
    * chore(formatting): auto fixes from pre-commit hooks
    
    for more information, see https://pre-commit.ci
    
    * feat: add pip
    
    * add tests for pip command
    
    * move pip test to pl-2
    
    * encode test payload
    
    * simplify bash script
    
    Co-authored-by: Max Leske <250711+theseion@users.noreply.github.com>
    
    * apply code review suggestions
    
    * chore(formatting): auto fixes from pre-commit hooks
    
    for more information, see https://pre-commit.ci
    
    * update apparmor test
    
    * fix: test
    
    ---------
    
    Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
    Co-authored-by: Max Leske <250711+theseion@users.noreply.github.com>
    3 people authored Aug 21, 2025
    Configuration menu
    Copy the full SHA
    da7b70a View commit details
    Browse the repository at this point in the history

Commits on Aug 22, 2025

  1. Configuration menu
    Copy the full SHA
    bdaccbc View commit details
    Browse the repository at this point in the history

Commits on Aug 27, 2025

  1. chore: use new linter version (#4244)

    * chore: use new linter version
    
    Replace version detection in bash with the functionality in the new
    linter version.
    
    * chore: update linter to v0.2.1
    theseion authored Aug 27, 2025
    Configuration menu
    Copy the full SHA
    980c7fe View commit details
    Browse the repository at this point in the history

Commits on Aug 28, 2025

  1. chore: find rules without test (#3881)

    * chore: find rules without test
    
    Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
    
    * fix: add tests exclusions
    
    Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
    
    ---------
    
    Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
    fzipi authored Aug 28, 2025
    Configuration menu
    Copy the full SHA
    1b58d12 View commit details
    Browse the repository at this point in the history

Commits on Aug 30, 2025

  1. feat: added ssh commands (#4249)

    * feat: added ssh commands
    
    * added test
    
    * remove command
    Xhoenix authored Aug 30, 2025
    Configuration menu
    Copy the full SHA
    746c552 View commit details
    Browse the repository at this point in the history

Commits on Aug 31, 2025

  1. feat: detect rmt, rmt-tar, and rmt-dump (#4242)

    `rmt` is the "remote magtape protocol module" and is used to manipulate
    a magnetic tapedrive. The `rmt` command is symlinked to `rmt-tar`, which
    is part of the `tar` package (on Debian). `rmt-dump` is part of the
    `dump` package (on Debian).
    theseion authored Aug 31, 2025
    Configuration menu
    Copy the full SHA
    ed2220c View commit details
    Browse the repository at this point in the history

Commits on Sep 3, 2025

  1. fix: eliminate the effect of backquote character in linter workflow (#…

    …4253)
    
    * Eliminate the effect of backquote character in linter workflow
    
    * Move TITLE env to the necessary place
    airween authored Sep 3, 2025
    Configuration menu
    Copy the full SHA
    d764f05 View commit details
    Browse the repository at this point in the history
  2. chore: release v4.18.0 (#4254)

    Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
    fzipi authored Sep 3, 2025
    Configuration menu
    Copy the full SHA
    ad2b560 View commit details
    Browse the repository at this point in the history
Loading