All pull requests

Pull requests

• Release the libmodsecurity error string on failed rule loading and merging

  #398·tomsommer opened Sep 19, 2026Contributor·

  ·
  2

• Fix leak of intervention.url when headers are already sent

  #397·tomsommer opened Sep 19, 2026Contributor·

  ·
  2

• Add modsecurity_log_thread_pool to run phase 5 and audit logging in a thread pool

  #396·tomsommer opened Sep 19, 2026Contributor·

  ·
  2

• Add modsecurity_response_body directive to skip response body buffering (closes #206)

  #395·tomsommer opened Sep 19, 2026Contributor·

  ·
  1

  4

• Do not run the connector on subrequests

  #394·tomsommer opened Sep 19, 2026Contributor·

  ·
  2

• Document request body buffering, temp-file spooling and their performance impact

  #393·tomsommer opened Sep 19, 2026Contributor·

  ·
  5

• Skip the pool cleanup walk in get_module_ctx for ordinary requests

  #392·tomsommer opened Sep 19, 2026Contributor·

  ·
  2

• Add modsecurity_request_body directive to skip request body buffering (supersedes #356)

  #391·tomsommer opened Sep 19, 2026Contributor·

  ·
  1

  10

• ci: retry pcre2/zlib/openssl downloads in build-windows

  #389·fzipi opened Jul 28, 2026·

  ·
  1

  1

• test: add valgrind memcheck/helgrind soak of the running module

  #387·fzipi opened Jul 28, 2026·

  ·
  1

• fix: header registration visibility and body-loop edge case

  #386·fzipi opened Jul 27, 2026·

  ·
  1

• fix: correctness gaps in response header/intervention handling

  #385·fzipi opened Jul 27, 2026·

  ·
  4

• fix: fail closed on swallowed WAF return values

  #384·fzipi opened Jul 27, 2026·

  ·
  5

• fix: replace strdup(error) with nginx pool allocation in config handlers

  #382·eilandert opened May 13, 2026·

  ·
  2

• fix: document request body plaintext disk spooling and mitigation steps

  #381·eilandert opened May 13, 2026·

  ·
  3

• fix: document PCRE1 global state thread-safety hazard and add build w…

  #380·eilandert opened May 13, 2026·

  ·
  3

• fix: free intervention strings on mcf NULL early return path

  #379·eilandert opened May 13, 2026·

  ·
  4

• fix: free intervention.url on redirect path and check ngx_list_push r…

  #378·eilandert opened May 13, 2026·

  ·
  5

• Implement Phase 4 handling for ModSecurity-nginx

  #377·Easton97-Jens opened May 11, 2026Contributor·

  ·
  18

• Add modsecurity log vars

  #374·meirdev opened Apr 22, 2026·

  ·
  7

• Support log reopen on SIGHUP and SIGUSR1

  #372·AntonDemushkin opened Mar 24, 2026·

  ·
  1

  4

• Do not check static string length

  #370·JakubOnderka opened Feb 4, 2026·

  ·
  6

• Do not include zero byte in output headers

  #369·JakubOnderka opened Feb 4, 2026·

  ·
  5

• Avoid allocation for server address

  #368·JakubOnderka opened Feb 4, 2026·

  ·
  8

• Do not allocate new string for common HTTP methods

  #367·JakubOnderka opened Feb 4, 2026·

  ·
  5