Skip to content

Pull requests: owasp-modsecurity/ModSecurity-nginx

New pull request New
30 Open 80 Closed
30 Open 80 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

ci: retry pcre2/zlib/openssl downloads in build-windows
#389 opened Jul 28, 2026 by fzipi Loading…
2 of 3 tasks
1
1
test: add valgrind memcheck/helgrind soak of the running module
#387 opened Jul 28, 2026 by fzipi Loading…
4 of 5 tasks
1
fix: header registration visibility and body-loop edge case
#386 opened Jul 27, 2026 by fzipi Loading…
1 task
1
fix: correctness gaps in response header/intervention handling
#385 opened Jul 27, 2026 by fzipi Loading…
2 of 4 tasks
4
fix: fail closed on swallowed WAF return values
#384 opened Jul 27, 2026 by fzipi Loading…
3 of 4 tasks
4
fix: replace strdup(error) with nginx pool allocation in config handlers
#382 opened May 13, 2026 by eilandert Loading…
1
fix: document request body plaintext disk spooling and mitigation steps
#381 opened May 13, 2026 by eilandert Loading…
2
fix: document PCRE1 global state thread-safety hazard and add build w…
#380 opened May 13, 2026 by eilandert Loading…
3
fix: free intervention strings on mcf NULL early return path
#379 opened May 13, 2026 by eilandert Loading…
4
fix: free intervention.url on redirect path and check ngx_list_push r…
#378 opened May 13, 2026 by eilandert Loading…
4
Implement Phase 4 handling for ModSecurity-nginx
#377 opened May 11, 2026 by Easton97-Jens Contributor Loading…
16
Add modsecurity log vars
#374 opened Apr 22, 2026 by meirdev Loading…
6
Support log reopen on SIGHUP and SIGUSR1
#372 opened Mar 24, 2026 by AntonDemushkin Loading…
1
3
Do not check static string length
#370 opened Feb 4, 2026 by JakubOnderka Loading…
2
Do not include zero byte in output headers
#369 opened Feb 4, 2026 by JakubOnderka Loading…
2
Avoid allocation for server address
#368 opened Feb 4, 2026 by JakubOnderka Loading…
2
Do not allocate new string for common HTTP methods
#367 opened Feb 4, 2026 by JakubOnderka Loading…
2
Remove not needed code fragment
#366 opened Dec 23, 2025 by tomsommer Contributor Loading…
1
Add HTTP/3 Host header support for ModSecurity
#364 opened Dec 4, 2025 by AMoo-Miki Loading…
1
4
Add prebuilt debian packages information to README
#357 opened Jun 3, 2025 by milad-zanganeh Loading…
7
Add an Option to Skip Body Inspections ( Closes #343 )
#356 opened Jun 3, 2025 by thekief Loading…
16
Add a Directive to get a Proxied Client's IP Address (Closes #341)
#342 opened Feb 13, 2025 by thekief Loading…
13
Allow enabling modsecurity per request
#303 opened May 4, 2023 by brandonpayton Contributor Loading…
7
Reuse already initialized rule set for each location
#291 opened Nov 16, 2022 by k1k Loading…
3
Put the ModSecurity interception logic onto separated threads
#289 opened Aug 30, 2022 by wfjsw Loading…
1
9
ProTip! What’s not been updated in a month: updated:<2026-06-30.