-
Notifications
You must be signed in to change notification settings - Fork 43
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore: deprecates Include config field. #51
Conversation
It can be done in 'directives' field and only causes confusion with respect to ordering of rules which is something that matters when it comes to disruptive actions.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There in no Include
in seclang. Are we extending it?
Maybe the wording isn't the best one bue Include is a known directive in
modsecurity/coraza (maybe it isn't part of seclang and it is more an Apache
thing)
…On Sun, 2 Apr 2023, 00:50 Felipe Zipitría, ***@***.***> wrote:
***@***.**** commented on this pull request.
There in no Include in seclang. Are we extending it?
------------------------------
In coraza.go
<#51 (comment)>
:
> if len(m.Include) > 0 {
+ m.logger.Warn("Include field is deprected, do the include in directives instead")
⬇️ Suggested change
- m.logger.Warn("Include field is deprected, do the include in directives instead")
+ m.logger.Warn("include field is deprecated, please use the Include directive instead")
—
Reply to this email directly, view it on GitHub
<#51 (review)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AAXOYAXRAQBHCWEV7TA4LFDW7CWNDANCNFSM6AAAAAAWP33LVI>
.
You are receiving this because you authored the thread.Message ID:
***@***.***>
|
Then let's change the wording so we don't confuse users. With this in mind, the integration has the requirement of providing this feature, or things won't work as expected... |
I don't think we need to provide this. Whenever you use coraza you are used
to do `Include @owasp_crs/*.conf` in the directives isn't? We expect the
same here.
…On Sun, 2 Apr 2023, 01:10 Felipe Zipitría, ***@***.***> wrote:
Then let's change the wording so we don't confuse users. With this in
mind, the integration has the requirement of providing this feature, or
things won't work as expected...
—
Reply to this email directly, view it on GitHub
<#51 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AAXOYAXY6KYQ36CCNFRVIYLW7CYYBANCNFSM6AAAAAAWP33LVI>
.
You are receiving this because you authored the thread.Message ID:
***@***.***>
|
Ok, now I get it (I thought we were discussing coraza, instead of the connector 🤦). If you change the wording with the suggestion I'll approve. |
Co-authored-by: Felipe Zipitría <3012076+fzipi@users.noreply.github.com>
Kudos, SonarCloud Quality Gate passed! 0 Bugs No Coverage information |
It can be done in 'directives' field and only causes confusion with respect to ordering of rules which is something that matters when it comes to disruptive actions.