Skip to content

Commit ba9a766

Browse files
committed
Update proposal (feedback)
1 parent 03e5f48 commit ba9a766

File tree

1 file changed

+7
-1
lines changed
  • src/content/docs/waf/managed-rules/reference/owasp-core-ruleset

1 file changed

+7
-1
lines changed

src/content/docs/waf/managed-rules/reference/owasp-core-ruleset/index.mdx

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,13 @@ The Cloudflare OWASP Core Ruleset is designed to work as a single entity to calc
1515

1616
The Cloudflare OWASP Core Ruleset is Cloudflare's implementation of the OWASP ModSecurity Core Rule Set, which is different from the [OWASP Top 10](https://owasp.org/www-project-top-ten/).
1717

18-
The OWASP Top 10 is a list of security risks and recommendations for addressing them. Some of the identified security risks cannot be protected by a firewall, which means that the Cloudflare OWASP Core Ruleset will not directly address all security risks and vulnerabilities identified in OWASP Top 10.
18+
The OWASP Top 10 is a list of the most severe security risks that can affect applications. Some of the identified security risks can be addressed by the OWASP Core Ruleset, but other risks cannot be protected by a web application firewall, such as the following:
19+
20+
- Insecure Design
21+
- Identification and Authentication Failures
22+
- Security Logging and Monitoring Failures
23+
24+
These risks depend more on how the application is built or how the entire monitoring pipeline is set up.
1925

2026
:::
2127

0 commit comments

Comments
 (0)