Comments (9)
Hey! The reason behind this is long-term maintenance; if you want a specific API or set of APIs, please mention them on this issue so we can review this. We don't have any problem with exposing additional APIs as long as it's safe, it doesn't break compatibility, and there is a clear use case.
There are certain limitations, for example, we cannot expose additional functions for existing immutable interfaces, as it breaks compatibility. In which case we would have to release Wrappers to access to them. Like:
tx := tx.(types.TransactionState)
tx = tx.(otherpackage.TransactionExtended)
from coraza.
In my case described above I guess I would want access to:
- corazawaf.NewWAF()
- seclang.NewParser()
- parser.FromString()
from coraza.
Do you want to create a new parser, or just add some directives?
from coraza.
No, some utility that checks rules validity and has a bit more verbose error messages in regards to where the actual broken rule is (file:linenumber).
from coraza.
from coraza.
@jptosso Another solution maybe just standalone CLI utility in repository that just loads ruleset and reports error if any, I am fine with doing PRs as long as there is some kind of simplified entry point for rule testing that is.
Also this will be similar to what has libmodsecurity, they ship standalone CLI to just do rule verification.
This way there is no need to wraparound into experimental API.
from coraza.
from coraza.
@jptosso Yea, sounds also good
from coraza.
Check https://github.com/corazawaf/coraza/pull/1101/files
from coraza.
Related Issues (20)
- Allow action generates logs in DetectionOnly mode HOT 2
- Fuzz tests #471 failed
- Fuzz tests #472 failed HOT 1
- “setvar:ip.docs_block-counter” Unable to resolve HOT 3
- Audit Logs are not indicating all matches
- Fuzz tests #516 failed
- Race condition in RuleMetadata.StrID() HOT 1
- [coraza.conf-recommended] Align Json processing on request & response
- ParseVariables function parses regular expressions with escape characters incorrectly
- Add support for GraphQL HOT 1
- coraza-crs-docker HOT 7
- Variable REQBODY_ERROR is never set HOT 1
- Native prometheus metrics HOT 3
- Unsupported "accuracy" Action in SecRule Configuration HOT 5
- Action Required: Fix Renovate Configuration HOT 1
- Add support for `SecArgumentSeparator` setting HOT 2
- Add a new `t:removeSQLComments` transformation HOT 1
- Tag not working with macro expansion HOT 1
- Streamed Responses aren't Coming Through Until Finalized HOT 7
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from coraza.