Home

Welcome to the CRS Project wiki!

• Release Policy
• Release Procedure
• LTS Release Procedure
• Use of Stale Bot on GitHub Issues (to close stale issues before they are solved)
• New plugin creation and integration

• Developer Links
• Dev on Duty
  • Dev on Duty Response Templates
  • Dev on Duty Archive
  • Dev on Duty Invoicing
• Onboarding of Developers
• Project for CDN testing CRS rules
• CRS Bug Bounty
• Technical Decisions and Best Practices
• Updating Word lists in data files and rules
• temporary CRSv4 Changelog list / CRSv4 Changelog

• Feature Request Library
• Rule Exclusion Plugin Wishlist
• Monthly Meeting Agenda Template
  • Agenda Next: Editable agenda for the upcoming project meetings
  • Monthly Meeting Archive
• CRS Expense Policy
• Log4J Lessons Learnt
• Google Summer of Code 2022
• Paid project coordination
• Hardening: the Apache Alpine Docker Container 2024

• Dev-Retreat-Packing-List
• Dev-Retreat-Template

• Dev Retreat in Southampton Overview
• Dev Retreat Topics

• Dev Retreat in Bern Overview
• Dev Retreat Topics
  • Sample Traffic
  • Visitors Day

• Dev Retreat in Woburn Overview
• Dev Retreat Topics
  • Project Status 2024
  • LTS Release via Sponsoring
  • Quantitative Discussion
  • ReDOS Working Session
  • Review rule's documentation

• Dev Retreat in Budapest Overview
• Dev Retreat Topics
  • Project: Implementing a testsuite to test rules for FPs on a scale
  • Project: Bringing the ModSecurity v3 + Nginx and Coraza Tests into our CI
  • Project: Status Page
  • Project: Cyclomatic Complexity
  • Roadmap Discussion
  • Release Plan Discussion (Part of Roadmap Discussion)
  • Renaming Discussion
  • Probability Score Discussion
  • Changelog Updates Discussion
  • Google Summer of Code Ideas Discussion
  • Dev Retreat 2024 Discussion (Includes feedback of 2023 dev retreat)

• Dev Retreat in Varese Overview
• Dev Retreat Topics

• Project: Coraza Integration
• Project: Update CRS Documentation
• Project: Write Technical Blog Posts
• Project: CRS Demo / Sandbox Site
• Project: CRS Status Page
• Workshop: How to Avoid CVEs in the Future
• Workshop: Project Planning Workshop
• Workshop: Trustwave Announcement about ModSecurity
• Workshop: Creating a Template to Document CRS Rules
• Workshop: New rules to defend against Request Smuggling and Server Side Request Forgery
• Workshop: What to do with ModSecurity Recommended Rules
• Retreat Infos: Infos for Participants
• Retreat Topics: Dev Retreat Topics