A new software update is available: OWASP CRS 4.12.0 released
OWASP CRS 4.12.0 released
OWASP CRS 4.12.0 has been released, introducing new features and detections, such as the prevention of V1 cookie format usage and the inclusion of restricted files for OpenStack and Docker Compose. Additional modifications encompass ensuring consistency in multipart header tags, preventing matches of invalid commands with five characters or fewer, incorporating warnings regarding modifications to default charsets, establishing response splitting rules and tests, employing improved regex, and refining log messages.
