[mod-security-users] X-Post: CRS version 4.0.0 is out

[Christian F. <chr...@ne...>]

Dear ModSecurity users,

Let CRS 4 be your valentine!

The OWASP CRS team is proud to announce the release of CRS 4.0.

* https://github.com/coreruleset/coreruleset/releases/tag/v4.0.0

The release brings some 500 changes including the new plugin architecture.

More important updates:

* Early-Blocking option
* Over 500 individual rule bypasses closed following a big Bug Bounty project
* New web shell detection
* Full RE2/Hyperscan compatibility for better performance
* Support for HTTP/3
* More granular reporting options

Please read the detailed blog post coming with this release at

* https://coreruleset.org/20240214/let-crs-4-be-your-valentine/

or the full CHANGES file at 

* https://github.com/coreruleset/coreruleset/blob/v4.0/dev/CHANGES.md

With the best regards,

Christian Folini on behalf of the OWASP CRS team

-- 
The purpose of computing is insight not numbers.
-- Richard W. Hamming