Skip to content

Commit 03e5f48

Browse files
committed
[WAF] Add clarification about OWASP Top 10
1 parent 9f87a59 commit 03e5f48

File tree

1 file changed

+9
-2
lines changed
  • src/content/docs/waf/managed-rules/reference/owasp-core-ruleset

1 file changed

+9
-2
lines changed

src/content/docs/waf/managed-rules/reference/owasp-core-ruleset/index.mdx

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,15 +3,22 @@ pcx_content_type: configuration
33
title: Cloudflare OWASP Core Ruleset
44
sidebar:
55
order: 3
6-
76
---
87

9-
import { DirectoryListing } from "~/components"
8+
import { DirectoryListing } from "~/components";
109

1110
The Cloudflare OWASP Core Ruleset is Cloudflare's implementation of the [OWASP ModSecurity Core Rule Set](https://owasp.org/www-project-modsecurity-core-rule-set/) (CRS). Cloudflare routinely monitors for updates from OWASP based on the latest version available from the official code repository.
1211

1312
The Cloudflare OWASP Core Ruleset is designed to work as a single entity to calculate a [threat score](/waf/managed-rules/reference/owasp-core-ruleset/concepts/#request-threat-score) and execute an action based on that score. When a rule in the ruleset matches a request, the threat score increases according to the rule score. If the final threat score is greater than the configured [score threshold](/waf/managed-rules/reference/owasp-core-ruleset/concepts/#score-threshold), Cloudflare executes the action configured in the last rule of the ruleset.
1413

14+
:::note
15+
16+
The Cloudflare OWASP Core Ruleset is Cloudflare's implementation of the OWASP ModSecurity Core Rule Set, which is different from the [OWASP Top 10](https://owasp.org/www-project-top-ten/).
17+
18+
The OWASP Top 10 is a list of security risks and recommendations for addressing them. Some of the identified security risks cannot be protected by a firewall, which means that the Cloudflare OWASP Core Ruleset will not directly address all security risks and vulnerabilities identified in OWASP Top 10.
19+
20+
:::
21+
1522
## Resources
1623

1724
<DirectoryListing />

0 commit comments

Comments
 (0)