You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The chat is going to happen on https://owasp.slack.com in the channel #coreruleset on Monday, April 7th, 2025, at 20:30 CET (CEST during summer in the Northern Hemisphere). That's the 1st Monday of the month. Please note that we have a CRS calendar (maintained by @fzipi).
Archived previous meetings and their decision are here.
What happened in the meantime since the chat last month
Outside development
🚀 The first Open WAF Day is going to happen in OWASP Global AppSec EU 2025 in Barcelona on Wednesday May 28th!
Inside development
Rules
CRS Sandbox
🔧 Sandbox was fixed and now it is running with the latest CRS version.
Security
Plugins
Documentation and Public Relations
Project Administration and Sponsor relationships
💬 We are discussing with two potential sponsors for 2025
✍️ Q1 2025 ended last week: DoD payments for Q1 will be submitted this week
Tools
Testing incl. Seaweed and many future plans
No news here.
Containers
No news is good news: our test suite is running with the latest container builds and so far no complaints from users
Project discussions and decisions
Consider adding support for Ruby as requested in issue #4074
Should we add JavaScript methods import and fetch to 941390? PR #4076
They are common English words although there is only one known false positive according to ftw quantitative: If you’re looking for a personal recommendation, if you’re willing to import (and perhaps wait around, as they often sell out line has been consistently excellent so far.. There are already other common English words in the rule such as alert, confirm, and prompt.
Adding support for Ruby
🔵 We'll add support for Ruby. We'll also add support for the top ten in the TIOBE index. @Xhoenix is willing to take the lead on this.
Should we add JavaScript methods import and fetch
🔵 PR was already merged today, no need to discuss it.
This is the Agenda for the Monthly CRS Chat.
The chat is going to happen on https://owasp.slack.com in the channel #coreruleset on Monday, April 7th, 2025, at 20:30 CET (CEST during summer in the Northern Hemisphere). That's the 1st Monday of the month. Please note that we have a CRS calendar (maintained by @fzipi).
Archived previous meetings and their decision are here.
What happened in the meantime since the chat last month
Outside development
Inside development
Rules
CRS Sandbox
Security
Plugins
Documentation and Public Relations
Project Administration and Sponsor relationships
Tools
Testing incl. Seaweed and many future plans
Containers
Project discussions and decisions
import
andfetch
to 941390? PR #4076ftw quantitative
:If you’re looking for a personal recommendation, if you’re willing to import (and perhaps wait around, as they often sell out line has been consistently excellent so far.
. There are already other common English words in the rule such asalert
,confirm
, andprompt
.Rules development, key project numbers
PRs that have been merged since the last meeting
console.dir
#4076firstname.dockery@host.tld
#4045We merged 30 PRs since the last monthly project chat.
Open PRs
Open PRs marked DRAFT or work in progress or needs action
java-classes.data
#4080at
to PL-2 (932370 PL-1, 932371 PL-2) #4015How to get to our slack and join the meeting?
If you are not yet on the OWASP Slack, here is your invite: https://owasp.org/slack/invite .
Everybody is welcome to join our community chat.
The text was updated successfully, but these errors were encountered: