seclang

May 31, 2023 GO-2023-1874

  GO-2023-1874: Denial of service in github.com/corazawaf/coraza/v2 and v3

Changes in this version

+ func ParseRule(options RuleOptions) (*corazawaf.Rule, error)

+ type DirectiveOptions struct

+ Datasets map[string][]string

+ Opts string

+ Parser ParserConfig

+ Path []string

+ Raw string

+ WAF *corazawaf.WAF

+ type Parser struct

+ func NewParser(waf *corazawaf.WAF) *Parser

+ func (p *Parser) FromFile(profilePath string) error

+ func (p *Parser) FromString(data string) error

+ func (p *Parser) SetRoot(root fs.FS)

+ type ParserConfig struct

+ ConfigDir string

+ ConfigFile string

+ DisabledRuleActions []string

+ DisabledRuleOperators []string

+ HasRuleDefaultActions bool

+ IgnoreRuleCompilationErrors bool

+ LastLine int

+ Root fs.FS

+ RuleDefaultActions []string

+ WorkingDir string

+ type RuleOptions struct

+ Data string

+ Datasets map[string][]string

+ Directive string

+ ParserConfig ParserConfig

+ Raw string

+ WAF *corazawaf.WAF

+ WithOperator bool

+ type RuleParser struct

+ func (rp *RuleParser) ParseActions(actions string) error

+ func (rp *RuleParser) ParseDefaultActions(actions string) error

+ func (rp *RuleParser) ParseOperator(operator string) error

+ func (rp *RuleParser) ParseVariables(vars string) error

+ func (rp *RuleParser) Rule() *corazawaf.Rule

May 27, 2023 GO-2023-1874

  GO-2023-1874: Denial of service in github.com/corazawaf/coraza/v2 and v3

Apr 12, 2023 GO-2023-1874

  GO-2023-1874: Denial of service in github.com/corazawaf/coraza/v2 and v3

Mar 17, 2023 GO-2023-1874

  GO-2023-1874: Denial of service in github.com/corazawaf/coraza/v2 and v3