eduar-hte

Add support to build ModSecurity-nginx on Windows

4

This PR includes changes to support building nginx with the ModSecurity-nginx module on Windows (which has been requested in the past in [ModSecurity Issue #2480](https://github.com/owasp-modsecurity/ModSecurity/issues/2480)). This work depends on the...

Add support to build libModSecurity v3 on Windows

11

This PR includes changes to support building libModSecurity v3 on Windows. Work was initially done on a snapshot of v3.0.12 to work on the latest stable version of the library,...

Enforce YAJL mandatory dependency in configuration and codebase

7

The goal of this PR is to enforce YAJL being a mandatory dependencies during configuration and simplify the codebase. Work on this PR originated in discussions about mandatory dependencies in...

Improve performance of VariableOrigin instances

1

## what - The previous approach would create a `std::unique_ptr` and store it in a `std::list` in `VariableValue`'s `Origins`. - The new approach stores `Origins` in a `std::vector` and constructs...

Update libinjection & Mbed TLS

4

## what Update third-party dependencies (included in `others` directory): libinjection & Mbed TLS. ## why The versions included in ModSecurity have not been updated in a while: - libinjection currently...

Build libModSecurity with std C++20

8

## what Update build configuration to build the library using std C++20 ## why The goal of this PR is not necessarily to update this configuration at this time, but...

Review and document multi-threading support and limitations

4

The goal of this issue is to collect and centralize information about multi-threading support of the current version of modSecurity , as the topic has come up in a number...

Use latest version of cppcheck (2.15.0) to analyze codebase

2

## what * Update the `cppcheck` GitHub workflow to run on the latest version of that tool (2.15.0) for better codebase analysis (more aligned with that of Sonarcloud). * NOTE:...

Metadata validation is performed during login on credentials with no attestation

4

### Version 0.12.1 ### Description Metadata validation (through the [ValidateMedata](https://github.com/go-webauthn/webauthn/blob/086658de685027bf2e43bdb0e80d37edcce176c6/protocol/metadata.go#L13) method) is skipped during the registration ceremony when no attestation information has been provided by the authenticator. You can see...

Use JSON source generator & enable trimming in DistributedCacheMetadataService

2

This is an update to be able to use `DistributedCacheMetadataService` in an AOT build, based on work in PR #304. In order to store and retrieve the cached metadata blob,...