Version 1.8.2 Brings custom JS fingerprinting capabilities to the bot detection feature, allowing both users and us to distribute detection rules directly via the hub. Brings rate limiting feature to the WAF. Brings performance improvements to the Security Engine, optimizing both memory copy behaviors and relying on static analysis to avoid processing unnecessary regular expressions. Brings perfor…
Changes AGENTS.md: clearer guidance on tests (#4713) @blotus pimp readme (#4701) @buixor New Features waf: add RateLimit() helper (#4721) @blotus [bot-detection] Add custom JS fingerprinting capabilities (#4657) @buixor Improvements Add cs_features metric (#4770) @blotus bot detection: add an option to set SameSite=None + Partitioned flag on cookie (#4764) @blotus exprhelpers: add GetDecisionsSinc…
Changes AGENTS.md: clearer guidance on tests (#4713) @blotus pimp readme (#4701) @buixor New Features [bot-detection] Add custom JS fingerprinting capabilities (#4657) @buixor Improvements exprhelpers: LookupHost goes through the DNS cache (#4741) @twiesing metrics: add CAPI last pull timestamp and error counter (#4749) @NazarkinRoman add cscli bot subcommand (#4666) @blotus prometheus: add kind l…
This release fixes a false positive in the bot detection feature for Brave Browser with shields enabled. Changes Improvements add HasValidChallengeCookie() helper (#4648) @blotus Bug Fixes lapi: return an empty slice instead of null when querying alerts (#4653) @blotus challenge: tolerate strings instead of struct in FP payload (#4655) @blotus Geolite2 notice This product includes GeoLite2 data cr…
Bot detection with CrowdSec WAF This release brings a major change to the CrowdSec WAF: a bot detection feature. If enabled, clients will be served a challenge + fingerprinting page before accessing the website. CrowdSec will evaluate the challenge and check the fingerprint against pre-configured rules to decide whether the client looks legitimate or not. You can find more information about this n…
Bot detection with CrowdSec WAF This release brings a major change to the CrowdSec WAF: a bot detection feature. If enabled, clients will be served a challenge + fingerprinting page before accessing the website. CrowdSec will evaluate the challenge and check the fingerprint against pre-configured rules to decide whether the client looks legitimate or not. You can find more information about this n…
Bot detection with CrowdSec WAF This release brings a major change to the CrowdSec WAF: a bot detection feature. If enabled, clients will be served a challenge + fingerprinting page before accessing the website. CrowdSec will evaluate the challenge and check the fingerprint against pre-configured rules to decide whether the client looks legitimate or not. You can find more information about this n…
New Features WAF: OpenAPI schema validation (#4097) @blotus Improvements WAF: enforce body size limitation (#4355) @blotus Decision stream: move to chunked transfer by default (#4413) @blotus cscli: add --quick flag to enroll command (#4350) @blotus propose an alternative, cleaner configuration for appsec-config (#4397) @buixor Bug Fixes cscli metrics: don't attempt to create a DB client if there'…
New Features WAF: OpenAPI schema validation (#4097) @blotus Improvements WAF: enforce body size limitation (#4355) @blotus Decision stream: move to chunked transfer by default (#4413) @blotus cscli: add --quick flag to enroll command (#4350) @blotus propose an alternative, cleaner configuration for appsec-config (#4397) @buixor Bug Fixes cscli metrics: don't attempt to create a DB client if there'…
CrowdSec 1.7.7 brings 2 major changes: On linux, RE2 is now used by default for evaluating regexp in parsers WAF rules can now contain a mix of AND/OR conditions without any limits, giving much greater flexibility when writing new rules RE2 by default on linux CrowdsSec has supported for a long time using RE2 as the regexp engine, and with this release we make it the default. CrowdSec has always u…
New Features add LookupFile and FileMap expr helpers (#4372) @buixor waf rules: allow arbitrary mix of AND and OR conditions (#4358) @blotus Improvements enable RE2 support by default on linux (#4386) @blotus cscli allowlists: add import command (#4378) @blotus WAF: expose more transformations from coraza (#4140) @blotus Add new kind alert attribute (#4351) @blotus Use environment proxy settings f…
Changes Bug Fixes cmd/crowdsec: assign overflow after parsing (#4225) @mmetc Geolite2 notice This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com. Installation Take a look at the installation instructions.
Changes replace syscall with unix/windows packages where possible (#3032) @mmetc pkg/acquisition: refact configuration validation and tests (#4187) @mmetc pkg/acquisition: remove/restore mock datasources after usage (#4190) @mmetc pkg/leakybucket: replace global variables with injected StateDumper (#4197) @mmetc pkg/acquisition: method docs, deduplicate module names (#4192) @mmetc errors.Wrapf ->…
Changes replace syscall with unix/windows packages where possible (#3032) @mmetc pkg/acquisition: refact configuration validation and tests (#4187) @mmetc pkg/acquisition: remove/restore mock datasources after usage (#4190) @mmetc pkg/leakybucket: replace global variables with injected StateDumper (#4197) @mmetc pkg/acquisition: method docs, deduplicate module names (#4192) @mmetc errors.Wrapf ->…
Changes docker: remove CROWDSEC_CONTAINER_ENV (#4085) @mmetc refact cscli: define csconfig.Getter once (#4091) @mmetc refact load/save apic token: dependencies and sentinel errors (#4081) @mmetc pkg/csplugin: use backoff package to retry notifications (#3944) @mmetc refact pkg/database batching (#3906) @mmetc refact pkg/acquisition: split appsec.go (#4043) @mmetc refact pkg/acquisition: journalctl…
Changes docker: remove CROWDSEC_CONTAINER_ENV (#4085) @mmetc refact cscli: define csconfig.Getter once (#4091) @mmetc refact load/save apic token: dependencies and sentinel errors (#4081) @mmetc pkg/csplugin: use backoff package to retry notifications (#3944) @mmetc refact pkg/database batching (#3906) @mmetc refact pkg/acquisition: split appsec.go (#4043) @mmetc refact pkg/acquisition: journalctl…
Changes docker: remove CROWDSEC_CONTAINER_ENV (#4085) @mmetc refact cscli: define csconfig.Getter once (#4091) @mmetc refact load/save apic token: dependencies and sentinel errors (#4081) @mmetc pkg/csplugin: use backoff package to retry notifications (#3944) @mmetc refact pkg/database batching (#3906) @mmetc refact pkg/acquisition: split appsec.go (#4043) @mmetc refact pkg/acquisition: journalctl…