Owasp Modsecurity Core Rule Set

the owasp® modsecurity core rule set (crs) is a set of generic attack detection rules for use with modsecurity or compatible web application firewalls. the crs aims to protect web applications from a wide range of attacks, including the owasp top ten, with a minimum of false alerts. the crs provides protection against many common attack categories. we strive to make the owasp modsecurity crs accessible to a wide audience of beginner and experienced users. we are interested in hearing any bug reports, false-positive alert reports, evasions, usability issues, and suggestions for new detections. create an issue on github to report a false positive or false negative (evasion). please include your installed version and the relevant portions of your modsecurity audit log. we will try and address your issue and potentially ask for additional information to reproduce your problem. please also note that stale issues will be flagged and closed after 120 days. you can search for stale issues wi