This release delivers improvements to AppSec functionality, dependency updates, and fixes for request handling.
Key Features and Enhancements
- AppSec: Implemented libddwaf schema collection to improve security rule handling. PR #242 by @cataphract
- AppSec: Updated obfuscation regexes used by the WAF for more accurate data protection. PR #248 by @robertpi
- Appsec: Improved client IP resolution by reading from the
Forwarded
header and treating CGNAT ranges as private. PR #250 by @cataphract - Dependencies: Upgraded to
libddwaf
1.28.0 with enhanced conversion logic. PR #249 by @cataphract - Fix: Correctly handle auth requests when subrequest logging is enabled. PR #245 by @zacharycmontoya
New Contributors
- Thanks to @zacharycmontoya for their first contribution! PR #245
Full Changelog: v1.7.0...v1.8.0