The release candidate of the OWASP ModSecurity Core Rule Set 3.3.1 for ModSecurity has been released.

The OWASP ModSecurity Core Rule Set (CRS) is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts.

New in 3.3.1:

New functionality:
* Add early blocking mode (tx.blocking_early) to block at the end of phase:1 and phase:3 (Christian Folini)

Fixes and improvements:
* Run rules as early as possible, by decreasing phase:2 to phase:1 and phase:4 to phase:3 where the variables allow it (Ervin Hegedus)



Download OWASP ModSecurity Core Rule Set 3.3.1-rc1