Skip to content
This repository was archived by the owner on May 14, 2020. It is now read-only.

Commit 021eaef

Browse files
authored
Merge pull request #1561 from fgsch/fgsch/dates
Switch to dates in YYYY-MM-DD format
2 parents b3470fe + bf04441 commit 021eaef

File tree

1 file changed

+43
-49
lines changed

1 file changed

+43
-49
lines changed

CHANGES

Lines changed: 43 additions & 49 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
or the CRS mailinglist at
66
* https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set
77

8-
== Version 3.2.0 - 9/24/2019 ==
8+
== Version 3.2.0 - 2019-09-24 ==
99

1010
New functionality:
1111
* Add AngularJS client side template injection 941380 PL2 (Franziska Bühler)
@@ -173,6 +173,7 @@ Documentation:
173173
* Updating crs site location (Chaim Sanders)
174174

175175
== Version 3.1.1 - 2019-06-26 ==
176+
176177
* Fix CVE-2019-11387 ReDoS against CRS on ModSecurity 3 at PL 2 (Christoph Hansen, Federico G. Schwindt)
177178
* Content-Type made case insensitive in 920240, 920400 (Federico G. Schwindt)
178179
* Allow % encoding in 920240 (Christoph Hansen)
@@ -181,7 +182,8 @@ Documentation:
181182
* Reduce false positives in 921110 (Yu Yagihashi, Federico G. Schwindt)
182183
* Fix bug in 943120 (XeroChen)
183184

184-
== Version 3.1.0 - 8/7/2018 ==
185+
== Version 3.1.0 - 2018-08-07 ==
186+
185187
* Add Detectify scanner (theMiddle)
186188
* Renaming matched_var/s (Victor Hora)
187189
* Remove lines with bare '#' comment char (Walter Hop)
@@ -283,12 +285,12 @@ Documentation:
283285
* Removed deprecated t:removeComments from 942100 (Christian Folini)
284286
* Add word boundary to rule 942410 (Franziska Bühler)
285287

286-
== Version 3.0.2 - 5/12/2017 ==
288+
== Version 3.0.2 - 2017-05-12 ==
287289

288290
* Remove debug rule that popped up in 3.0.1 (Christian Folini)
289291

290292

291-
== Version 3.0.1 - 5/9/2017 ==
293+
== Version 3.0.1 - 2017-05-09 ==
292294

293295
* SECURITY: Removed insecure handling of X-Forwarded-For header;
294296
reported by Christoph Hansen (Walter Hop)
@@ -325,7 +327,7 @@ Documentation:
325327
* Fixed bug with DoS rule 912160 (@loudly-soft, Christian Folini)
326328

327329

328-
== Version 3.0.0 - 11/10/2016 ==
330+
== Version 3.0.0 - 2016-11-10 ==
329331

330332
Huge changeset running in separate branch from September 2013 to September 2016.
331333
This is a cursory summary of the most important changes:
@@ -398,9 +400,7 @@ This is a cursory summary of the most important changes:
398400
* Many improvements to rules in 2014/5 (Ryan Barnett)
399401

400402

401-
== Version 2.2.9 - 09/30/2013 ==
402-
403-
Security Fixes:
403+
== Version 2.2.9 - 2013-09-30 ==
404404

405405
Improvements:
406406
* Updated the /util directory structure
@@ -412,9 +412,7 @@ Bug Fixes:
412412
https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/157
413413

414414

415-
== Version 2.2.8 - 06/30/2013 ==
416-
417-
Security Fixes:
415+
== Version 2.2.8 - 2013-06-30 ==
418416

419417
Improvements:
420418
* Updatd the /util directory structure
@@ -443,9 +441,7 @@ Bug Fixes:
443441
- https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/18
444442

445443

446-
== Version 2.2.7 - 12/19/2012 ==
447-
448-
Security Fixes:
444+
== Version 2.2.7 - 2012-12-19 ==
449445

450446
Improvements:
451447
* Added JS Overrides file to identify successfull XSS probes
@@ -460,9 +456,7 @@ Bug Fixes:
460456
* Fixed bug in XSS rules checking TX:PM_XSS_SCORE variable
461457

462458

463-
== Version 2.2.6 - 09/14/2012 ==
464-
465-
Security Fixes:
459+
== Version 2.2.6 - 2012-09-14 ==
466460

467461
Improvements:
468462
* Started rule formatting update for better readability
@@ -483,7 +477,7 @@ Bug Fixes:
483477
https://www.modsecurity.org/tracker/browse/CORERULES-78
484478

485479

486-
== Version 2.2.5 - 06/14/2012 ==
480+
== Version 2.2.5 - 2012-06-14 ==
487481

488482
Security Fixes:
489483
* Updated the anomaly scoring value for rule ID 960000 to critical
@@ -507,7 +501,7 @@ Bug Fixes:
507501
* Added forceRequestBodyVariable action to rule ID 960904
508502

509503

510-
== Version 2.2.4 - 03/14/2012 ==
504+
== Version 2.2.4 - 2012-03-14 ==
511505

512506
Improvements:
513507
* Added Location and Set-Cookie checks to Response Splitting rule ID 950910
@@ -523,7 +517,7 @@ Bug Fixes:
523517
* Fixed duplidate rule IDs
524518

525519

526-
== Version 2.2.3 - 12/19/2011 ==
520+
== Version 2.2.3 - 2011-12-19 ==
527521

528522
Improvements:
529523
* Added Watcher Cookie Checks to optional_rules/modsecurity_crs_55_appication_defects.conf file
@@ -539,7 +533,7 @@ Bug Fixes:
539533
* Updated the regex and added tags for RFI rules.
540534

541535

542-
== Version 2.2.2 - 09/28/2011 ==
536+
== Version 2.2.2 - 2011-09-28 ==
543537

544538

545539
Improvements:
@@ -558,7 +552,7 @@ Bug Fixes:
558552
* Updated the SQLi regex for rule ID 981242
559553

560554

561-
== Version 2.2.1 - 07/20/2011 ==
555+
== Version 2.2.1 - 2011-07-20 ==
562556

563557

564558
Improvements:
@@ -579,7 +573,7 @@ Bug Fixes:
579573
* Updated rule ID 971150 signature to remove ;
580574

581575

582-
== Version 2.2.0 - 05/26/2011 ==
576+
== Version 2.2.0 - 2011-05-26 ==
583577

584578

585579
Improvements:
@@ -629,7 +623,7 @@ Bug Fixes:
629623
They will now inherit the settings from the SecDefaultAction
630624

631625

632-
== Version 2.1.2 - 02/17/2011 ==
626+
== Version 2.1.2 - 2011-02-17 ==
633627

634628

635629
Improvements:
@@ -643,7 +637,7 @@ Bug Fixes:
643637
* Added missing " in the skipAfter SecAction in the CC Detection rule set
644638

645639

646-
== Version 2.1.1 - 12/30/2010 ==
640+
== Version 2.1.1 - 2010-12-30 ==
647641

648642

649643
Bug Fixes:
@@ -656,7 +650,7 @@ Bug Fixes:
656650
* Moved the comment spam data file into the optional_rules directory
657651

658652

659-
== Version 2.1.0 - 12/29/2010 ==
653+
== Version 2.1.0 - 2010-12-29 ==
660654

661655

662656
Improvements:
@@ -687,7 +681,7 @@ Improvements:
687681

688682

689683

690-
== Version 2.0.10 - 11/29/2010 ==
684+
== Version 2.0.10 - 2010-11-29 ==
691685

692686

693687
Improvements:
@@ -701,7 +695,7 @@ Bug Fixes:
701695

702696

703697

704-
== Version 2.0.9 - 11/17/2010 ==
698+
== Version 2.0.9 - 2010-11-17 ==
705699

706700

707701
Improvements:
@@ -736,7 +730,7 @@ Bug Fixes:
736730
https://www.modsecurity.org/tracker/browse/CORERULES-62
737731

738732

739-
== Version 2.0.8 - 08/27/2010 ==
733+
== Version 2.0.8 - 2010-08-27 ==
740734

741735

742736
Improvements:
@@ -759,7 +753,7 @@ Bug Fixes:
759753
https://www.modsecurity.org/tracker/browse/CORERULES-29
760754

761755

762-
== Version 2.0.7 - 06/4/2010 ==
756+
== Version 2.0.7 - 2010-06-04 ==
763757

764758

765759
Improvements:
@@ -786,7 +780,7 @@ Bug Fixes:
786780
* Fixed restricted_extension false positive by adding boundary characters
787781

788782

789-
== Version 2.0.6 - 02/26/2010 ==
783+
== Version 2.0.6 - 2010-02-26 ==
790784

791785

792786
Bug Fixes:
@@ -805,7 +799,7 @@ Bug Fixes:
805799
* Update phpids filters to use pass action instead of block
806800

807801

808-
== Version 2.0.5 - 02/01/2010 ==
802+
== Version 2.0.5 - 2010-02-01 ==
809803

810804

811805
Improvements:
@@ -845,7 +839,7 @@ Bug Fixes:
845839
and blocking
846840

847841

848-
== Version 2.0.4 - 11/30/2009 ==
842+
== Version 2.0.4 - 2009-11-30 ==
849843

850844

851845
Improvements:
@@ -862,7 +856,7 @@ Bug Fixes:
862856
phase:4 which would allow for blocking based on information leakage issues.
863857

864858

865-
== Version 2.0.3 - 11/05/2009 ==
859+
== Version 2.0.3 - 2009-11-05 ==
866860

867861

868862
Improvements:
@@ -886,7 +880,7 @@ Bug Fixes:
886880
https://www.modsecurity.org/tracker/browse/CORERULES-23
887881

888882

889-
== Version 2.0.2 - 09/11/2009 ==
883+
== Version 2.0.2 - 2009-09-11 ==
890884

891885

892886
Improvements:
@@ -898,7 +892,7 @@ Bug Fixes:
898892
https://www.modsecurity.org/tracker/browse/CORERULES-15
899893

900894

901-
== Version 2.0.1 - 08/07/2009 ==
895+
== Version 2.0.1 - 2009-08-07 ==
902896

903897

904898
Improvements:
@@ -916,7 +910,7 @@ Bug Fixes:
916910
https://www.modsecurity.org/tracker/browse/CORERULES-9
917911

918912

919-
== Version 2.0.0 - 07/29/2009 ==
913+
== Version 2.0.0 - 2009-07-29 ==
920914

921915

922916
New Rules & Features:
@@ -1014,15 +1008,15 @@ Other Fixes:
10141008
rules and chained rules).
10151009

10161010

1017-
== Version 1.6.1 - 2008/04/22 ==
1011+
== Version 1.6.1 - 2008-04-22 ==
10181012

10191013

10201014
* Fixed a bug where phases and transformations where not specified explicitly
10211015
in rules. The issue affected a significant number of rules, and we strongly
10221016
recommend to upgrade.
10231017

10241018

1025-
== Version 1.6.0 - 2008/02/19 ==
1019+
== Version 1.6.0 - 2008-02-19 ==
10261020

10271021

10281022
New Rulesets & Features:
@@ -1060,7 +1054,7 @@ Additional rules logic:
10601054

10611055

10621056

1063-
== Version 1.5.1 - 2007/12/6 ==
1057+
== Version 1.5.1 - 2007-12-06 ==
10641058

10651059

10661060
False Positives Fixes:
@@ -1077,7 +1071,7 @@ Other Fixes:
10771071
* File 55 contained empty regular expressions. Fixed.
10781072

10791073

1080-
== Version 1.5 - 2007/11/23 ==
1074+
== Version 1.5 - 2007-11-23 ==
10811075

10821076

10831077
New Rulesets:
@@ -1116,7 +1110,7 @@ False Positives Fixes:
11161110
then you should uncomment this rule (in file 20)
11171111

11181112

1119-
version 1.4.3 - 2007/07/21
1113+
version 1.4.3 - 2007-07-21
11201114

11211115

11221116
New Events:
@@ -1143,7 +1137,7 @@ Additional rules logic:
11431137

11441138

11451139

1146-
version 1.4 build 2 - 2007/05/17
1140+
version 1.4 build 2 - 2007-05-17
11471141

11481142

11491143
New Feature:
@@ -1171,7 +1165,7 @@ FP fixes:
11711165
* Rule 950107 - Will allow a parameter to end in a % sign from now on
11721166

11731167

1174-
version 1.4 - 2007/05/02
1168+
version 1.4 - 2007-05-02
11751169

11761170

11771171
New Events:
@@ -1205,21 +1199,21 @@ Additional rules logic:
12051199
* Added 1=1 signature (SQL Injection)
12061200

12071201

1208-
version 1.3.2 build 4 2007/01/17
1202+
version 1.3.2 build 4 2007-01-17
12091203

12101204

12111205
Fixed apache 2.4 dummy requests exclusion
12121206
Added persistent PDF UXSS detection rule
12131207

12141208

1215-
== Version 1.3.2 build 3 2007/01/10 ==
1209+
== Version 1.3.2 build 3 2007-01-10 ==
12161210

12171211

12181212
Fixed regular expression in rule 960010 (file #30) to allow multipart form data
12191213
content
12201214

12211215

1222-
== Version 1.3.2 - 2006/12/27 ==
1216+
== Version 1.3.2 - 2006-12-27 ==
12231217

12241218

12251219
New events:
@@ -1255,7 +1249,7 @@ Modified descriptions:
12551249
* Added ctl:auditLogParts=+E for outbound events and attacks to collect response.
12561250

12571251

1258-
== Version 1.2 - 2006/11/19 ==
1252+
== Version 1.2 - 2006-11-19 ==
12591253

12601254

12611255
Changes:
@@ -1271,7 +1265,7 @@ SecResponseBodyMimeType)
12711265
+ Too many FPs with events 950903 & 950905. Commented them out until fixed.
12721266

12731267

1274-
== Version 1.1 - 2006/10/18 ==
1268+
== Version 1.1 - 2006-10-18 ==
12751269

12761270

12771271
Initial version

0 commit comments

Comments
 (0)