Releases: ADD-SP/ngx_waf
v5.3.2
v5.3.1
v5.3.0
[5.3.0] - 2021-05-16 GMT+0800
Added
-
New directive:
waf_under_attack
, which can be used when the site is under attack. -
New directive:
waf_http_status
, which sets the HTTP status code returned when a request is blocked. -
New built-in variable:
$waf_blocking_log
, not an empty string when the request is intercepted for its value.
Changed
- Update default rules.
Fixed
-
CC protection sometimes not work.
-
Cookie inspection sometimes not work.
[5.3.0] - 2021-05-16 GMT+0800
新增
-
新的配置:
waf_under_attack
,当网站受到攻击时可以使用。 -
新的配置:
waf_http_status
,用于设置请求被拦截后返回的 HTTP 状态码。 -
新的内置变量:
$waf_blocking_log
,当请求被拦截其值时不为空字符串。
变动
- 更新了默认规则。
修复
-
CC 防护有时会失效。
-
Cookie 防护有时会失效。
v5.3.0-beta.4
[5.3.0-beta.4] - 2021-05-10 GMT+0800
Added
-
New directive:
waf_under_attack
, which can be used when the site is under attack. -
New directive:
waf_http_status
, which sets the HTTP status code returned when a request is blocked. -
New built-in variable:
$waf_blocking_log
, not an empty string when the request is intercepted for its value.
Fixed
-
CC protection sometimes not work.
-
Cookie inspection sometimes not work.
[5.3.0-beta.4] - 2021-05-10 GMT+0800
新增
-
新的配置:
waf_under_attack
,当网站受到攻击时可以使用。 -
新的配置:
waf_http_status
,用于设置请求被拦截后返回的 HTTP 状态码。 -
新的内置变量:
$waf_blocking_log
,当请求被拦截其值时不为空字符串。
修复
-
CC 防护有时会失效。
-
Cookie 防护有时会失效。
v5.3.0-beta.3
[5.3.0-beta.3] - 2021-05-09 GMT+0800
NOTE
Compared to v5.3.0-beta.2, this update makes the Under-Attack mode have basic resistance to replay attacks.
Added
- New directive:
waf_under_attack
, which can be used when the site is under attack.
Fixed
- CC protection can sometimes not work.
[5.3.0-beta.3] - 2021-05-09 GMT+0800
注意
相较于 v5.3.0-beta.2,本次更新后 Under-Attack 模式具有了基本的抵抗重放攻击的能力。
新增
- 新的配置:
waf_under_attack
,当网站受到攻击时可以使用。
修复
- CC 防护有时会失效。
v5.3.0-beta.2
[5.3.0-beta.2] - 2021-05-01 GMT+0800
Added
- New directive:
waf_under_attack
, which can be used when the site is under attack.
Fixed
- The directive
waf_priority
is not recognized properly, this bug exists only inv5.3.0-beta.1
.
[5.3.0-beta.2] - 2021-05-01 GMT+0800
新增
- 新的配置:
waf_under_attack
,当网站受到攻击时可以使用。
修复
- 不能正确识别配置
waf_priority
,此 bug 仅存在于v5.3.0-beta.1
。
v5.3.0-beta.1
[5.3.0-beta.1] - 2021-04-30 GMT+0800
Added
- New directive:
waf_under_attack
, which can be used when the site is under attack.
[5.3.0-beta.1] - 2021-04-30 GMT+0800
新增
- 新的配置:
waf_under_attack
,当网站受到攻击时可以使用。
v5.2.0
[5.1.2] - 2021-04-30 GMT+0800
Added
- Support for detecting SQL injection (powered by libinjection). This feature can be enabled by enabling the mode
LIB-INJECTION
, see the documentation for details.
[5.1.2] - 2021-04-30 GMT+0800
新增
- 支持检测 SQL 注入(Powered By libinjection)。你可以通过启用
LIB-INJECTION
模式开启该功能,详见使用文档。
v5.2.0-beta.2
[5.2.0-beta.1] - 2021-04-28 GMT+0800
Added
- Support for detecting SQL injection (powered by libinjection). This feature can be enabled by enabling the mode
LIB-INJECTION
, see the documentation for details.
Fixed
- Memory leak, this bug only exists in
v5.2.0-beta.1
.
[5.2.0-beta.1] - 2021-04-28 GMT+0800
新增
- 支持检测 SQL 注入(Powered By libinjection)。你可以通过启用
LIB-INJECTION
模式开启该功能,详见使用文档。
修复
- 内存泄露,此 bug 仅存在于
v5.2.0-beta.1
。
v5.2.0-beta.1
[5.2.0-beta.1] - 2021-04-28 GMT+0800
Added
- Support for detecting SQL injection (powered by libinjection). This feature can be enabled by enabling the mode
LIB-INJECTION
, see the documentation for details.
[5.2.0-beta.1] - 2021-04-28 GMT+0800
新增
- 支持检测 SQL 注入(Powered By libinjection)。你可以通过启用
LIB-INJECTION
模式开启该功能,详见使用文档。