All pull requests

Pull requests

• fix: unescape double quotes in operator parameters

  #3753·hakarrr opened Nov 12, 2026·

  ·
  1

  1

• test: add native JSON characterization cases before YAJL replacement

  #3752·Easton97-Jens opened Nov 12, 2026Contributor·

  ·
  2

• feat: add msc_get_tx() to read TX variables from connectors

  v4
  #3751·fzipi opened Nov 11, 2026Collaborator·

  ·
  5

• AnchoredSetVariable::resolve: insert collected values once (quadratic in the number of arguments)

  #3749·MeGunes opened Nov 10, 2026·

  ·
  7

• Allocate less memory when using Regex::search

  #3748·JakubOnderka opened Nov 10, 2026Contributor·

  ·
  4

• Add content_length_mismatch flag to regression tests

  #3747·hnakamur opened Nov 7, 2026Contributor·

  ·
  13

• fix: reject unknown operators that only prefix-match a real operator

  #3746·VISHNU0906 opened Nov 7, 2026·

  ·
  1

  8

• change: Build FULL_REQUEST variable lazily on first use

  #3745·JakubOnderka opened Nov 4, 2026Contributor·

  ·
  2

• change!: preallocate buffer for request and response bodies

  #3744·JakubOnderka opened Nov 3, 2026Contributor·

  ·
  11

• Refactor toHexIfNeeded for better string handling

  #3743·JakubOnderka opened Nov 2, 2026Contributor·

  ·
  3

• fix: pop each entry of a Lua transformation table (v2)

  2.x
  #3739·airween opened Nov 2, 2026Member·

  ·
  3

• fix: Lua m.getvar()/m.getvars() transformation arguments

  3.x
  #3738·airween opened Nov 2, 2026Member·

  ·
  1

  14

• fix: expand %{RULE.*} in SecAction and SecRuleScript rules

  3.x
  #3734·airween opened Nov 1, 2026Member·

  ·
  1

  15

• fix: Lua m.setvar() returned -1, handing the script stack garbage

  #3732·fzipi opened Nov 1, 2026Collaborator·

  ·
  1

  8

• ci(v2): update Ubuntu coverage, Lua selection and GitHub Actions

  2.x
  #3729·Easton97-Jens opened Nov 1, 2026Contributor·

  ·
  4

• build: remove incorrect PCRE/PCRE2 runtime path construction; add --with-pcre-rpath=DIR

  #3727·XargsMarksTheSpot opened Oct 31, 2026·

  ·
  1

• fix: print action name instead of pointer in UpdateActionByID errors

  #3726·Nikhil-jaiswal007 opened Oct 31, 2026·

  ·
  1

  2

• docs: add concise AGENTS.md guidance for ModSecurity v3

  #3725·Easton97-Jens opened Oct 30, 2026Contributor·

  ·
  22

• fix: DURATION now measures wall-clock time in integer microseconds

  #3721·Nikhil-jaiswal007 opened Oct 28, 2026·

  ·
  1

  3

• ci: propose runner updates and track retirements

  #3718·Easton97-Jens opened Oct 27, 2026Contributor·

  ·
  9

• ci: configure weekly GitHub Actions updates

  #3717·Easton97-Jens opened Oct 27, 2026Contributor·

  ·
  2

• v2: Separate request-body bucket handling from the reader

  #3716·vortexopenclaw opened Oct 27, 2026·

  ·
  5

• build: support Conan 2 presets and Visual Studio 2026

  #3715·Easton97-Jens opened Oct 27, 2026Contributor·

  ·
  4

• build: derive Windows CMake version from public header

  #3714·Easton97-Jens opened Oct 27, 2026Contributor·

  ·
  4

• fix: make setvar =+N / =-N an atomic update in the collection backend

  3.x
  #3699·fzipi opened Oct 16, 2026Collaborator·

  ·
  1

  4