Skip to content

Releases: ADD-SP/ngx_waf

v5.3.2

28 May 10:38
d34af8f
Compare
Choose a tag to compare

[5.3.2] - 2021-05-28 UTC+0800

Fixed

  • Memory corruption.

[5.3.2] - 2021-05-28 UTC+0800

Fixed

  • 内存损坏。

v5.3.1

26 May 11:21
8a40b79
Compare
Choose a tag to compare

[5.3.1] - 2021-05-26 GMT+0800

Fixed

  • Sometimes the module does not compile even if the dependencies are installed correctly.

[5.3.1] - 2021-05-26 GMT+0800

修复

  • 有时即使正确安装了依赖也不能编译模块。

v5.3.0

16 May 02:30
1ec0bb7
Compare
Choose a tag to compare

[5.3.0] - 2021-05-16 GMT+0800

Added

  • New directive: waf_under_attack, which can be used when the site is under attack.

  • New directive: waf_http_status, which sets the HTTP status code returned when a request is blocked.

  • New built-in variable: $waf_blocking_log, not an empty string when the request is intercepted for its value.

Changed

  • Update default rules.

Fixed

  • CC protection sometimes not work.

  • Cookie inspection sometimes not work.


[5.3.0] - 2021-05-16 GMT+0800

新增

  • 新的配置:waf_under_attack,当网站受到攻击时可以使用。

  • 新的配置:waf_http_status,用于设置请求被拦截后返回的 HTTP 状态码。

  • 新的内置变量:$waf_blocking_log,当请求被拦截其值时不为空字符串。

变动

  • 更新了默认规则。

修复

  • CC 防护有时会失效。

  • Cookie 防护有时会失效。

v5.3.0-beta.4

10 May 09:09
3694141
Compare
Choose a tag to compare
v5.3.0-beta.4 Pre-release
Pre-release

[5.3.0-beta.4] - 2021-05-10 GMT+0800

Added

  • New directive: waf_under_attack, which can be used when the site is under attack.

  • New directive: waf_http_status, which sets the HTTP status code returned when a request is blocked.

  • New built-in variable: $waf_blocking_log, not an empty string when the request is intercepted for its value.

Fixed

  • CC protection sometimes not work.

  • Cookie inspection sometimes not work.


[5.3.0-beta.4] - 2021-05-10 GMT+0800

新增

  • 新的配置:waf_under_attack,当网站受到攻击时可以使用。

  • 新的配置:waf_http_status,用于设置请求被拦截后返回的 HTTP 状态码。

  • 新的内置变量:$waf_blocking_log,当请求被拦截其值时不为空字符串。

修复

  • CC 防护有时会失效。

  • Cookie 防护有时会失效。

v5.3.0-beta.3

09 May 12:53
7554c1e
Compare
Choose a tag to compare
v5.3.0-beta.3 Pre-release
Pre-release

[5.3.0-beta.3] - 2021-05-09 GMT+0800

NOTE

Compared to v5.3.0-beta.2, this update makes the Under-Attack mode have basic resistance to replay attacks.

Added

  • New directive: waf_under_attack, which can be used when the site is under attack.

Fixed

  • CC protection can sometimes not work.

[5.3.0-beta.3] - 2021-05-09 GMT+0800

注意

相较于 v5.3.0-beta.2,本次更新后 Under-Attack 模式具有了基本的抵抗重放攻击的能力。

新增

  • 新的配置:waf_under_attack,当网站受到攻击时可以使用。

修复

  • CC 防护有时会失效。

v5.3.0-beta.2

01 May 02:35
28008bb
Compare
Choose a tag to compare
v5.3.0-beta.2 Pre-release
Pre-release

[5.3.0-beta.2] - 2021-05-01 GMT+0800

Added

  • New directive: waf_under_attack, which can be used when the site is under attack.

Fixed

  • The directive waf_priority is not recognized properly, this bug exists only in v5.3.0-beta.1.

[5.3.0-beta.2] - 2021-05-01 GMT+0800

新增

  • 新的配置:waf_under_attack,当网站受到攻击时可以使用。

修复

  • 不能正确识别配置 waf_priority,此 bug 仅存在于 v5.3.0-beta.1

v5.3.0-beta.1

30 Apr 15:18
003dc70
Compare
Choose a tag to compare
v5.3.0-beta.1 Pre-release
Pre-release

[5.3.0-beta.1] - 2021-04-30 GMT+0800

Added

  • New directive: waf_under_attack, which can be used when the site is under attack.

[5.3.0-beta.1] - 2021-04-30 GMT+0800

新增

  • 新的配置:waf_under_attack,当网站受到攻击时可以使用。

v5.2.0

30 Apr 15:16
a5be32c
Compare
Choose a tag to compare

[5.1.2] - 2021-04-30 GMT+0800

Added

  • Support for detecting SQL injection (powered by libinjection). This feature can be enabled by enabling the mode LIB-INJECTION, see the documentation for details.

[5.1.2] - 2021-04-30 GMT+0800

新增

  • 支持检测 SQL 注入(Powered By libinjection)。你可以通过启用 LIB-INJECTION 模式开启该功能,详见使用文档。

v5.2.0-beta.2

28 Apr 02:39
68ac995
Compare
Choose a tag to compare
v5.2.0-beta.2 Pre-release
Pre-release

[5.2.0-beta.1] - 2021-04-28 GMT+0800

Added

  • Support for detecting SQL injection (powered by libinjection). This feature can be enabled by enabling the mode LIB-INJECTION, see the documentation for details.

Fixed

  • Memory leak, this bug only exists in v5.2.0-beta.1.

[5.2.0-beta.1] - 2021-04-28 GMT+0800

新增

  • 支持检测 SQL 注入(Powered By libinjection)。你可以通过启用 LIB-INJECTION 模式开启该功能,详见使用文档。

修复

  • 内存泄露,此 bug 仅存在于 v5.2.0-beta.1

v5.2.0-beta.1

27 Apr 17:44
c52bded
Compare
Choose a tag to compare
v5.2.0-beta.1 Pre-release
Pre-release

[5.2.0-beta.1] - 2021-04-28 GMT+0800

Added

  • Support for detecting SQL injection (powered by libinjection). This feature can be enabled by enabling the mode LIB-INJECTION, see the documentation for details.

[5.2.0-beta.1] - 2021-04-28 GMT+0800

新增

  • 支持检测 SQL 注入(Powered By libinjection)。你可以通过启用 LIB-INJECTION 模式开启该功能,详见使用文档。