Re: [mod-security-users] The directory traversal problem

[Ivan R. <iv...@we...>]

> As Ivan wrote on webappsec, putting together a repository
> with regexes and other snippets for mod_security would be
> a good idea.

   I'm half way there. The most boring bits of the (web)
   application are completed and I expect to have the rule
   database running (in a beta version) by the end of
   January.

   On a similar note, I've joined the WAS TC committee:
   http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=was

   to work on a specification for Web server/application
   protection. I expect the rule database to be compatible
   with the WAS spec. once it is completed.

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]