v1.0.0

🍏 Stable teler-waf version 1 released! 🛡️

v0.7.0

📣 New release of teler-waf version 0.7.0 just hit the streets with a highly anticipated and powerful load external custom rules feature! 🎉 With this groundbreaking addition, teler-waf empowers you to take your web application security to new heights. 🚀

This option introduces a seamless way to load custom rules straight from external files, leveraging the flexibility and manageability of YAML format. This means you can now define and maintain your custom rules in separate files, making it easier to organize and manage complex security configurations.

Imagine the possibilities! You can effortlessly create and modify custom rules in YAML with zero sweat, with each file accommodating one or more rules. Moreover, this option is designed to be highly adaptable to your specific needs.

Integrating these custom rules into teler-waf is effortless. Just drop the file path or glob pattern to your custom rule files, and teler-waf will dynamically do the rest and put it in action. This gives you unparalleled flexibility, as you can add, modify, or ditch rules without messing with your Go app code. No stress, no mess, it's smooth sailing!

Experience the next level of web app security with teler-waf and its feature. Say goodbye to those web attacks, and brute force shenanigans, and keep shady IP addresses and sketchy HTTP referrers in check. Lock down your web app like a pro, customize whitelists, and roll smoothly with your favorite frameworks.

Bump now and fortify your web app security like never before! 🛡️🔒

v0.6.0

Changelog

ddc4918 feat(#24): add Falcosidekick integration
e9af9d7 feat: add caller info
d89d58c examples: bump to v0.5.0
cd7ce82 build(deps): bump golang.org/x/net (#34)
2792572 build(deps): bump github.com/klauspost/compress from 1.16.3 to 1.16.5 (#35)
4d62f58 build(deps): bump github.com/klauspost/compress from 1.16.0 to 1.16.3 (#30)
47649c2 build(deps): bump actions/setup-go from 2 to 4 (#32)

Full Changelog: v0.5.0...v0.6.0

v0.4.0

Changelog

• 80237a5 build(deps): bump golang.org/x/text from 0.3.3 to 0.3.8 (#27)
• 022f9a5 build+ci: bump minimum go version
• dae7eeb feat: add in-memory opt to load threat dataset on initialization
• 532f387 refactor(threat): dry-ing consts & export DB URL
• 136f0bb refactor(threat): Filepath to Filename
• 1eee984 docs: update bench, add resources & security section
• 17e36e6 docs: add repo-level security policy
• 5940a44 test: add malformed threat datasets & more cases
• 2dae7f1 build: remove cache env
• 9f40db5 examples: update demo style & wording
• 1515d00 examples: bump teler-waf mod
• a0e12a1 examples: add init modal

Full Changelog: v0.3.1...v0.4.0

v0.3.1

Changelog

• 5a88699 refactor(threat.Get): download a compressed archive file instead & verify its checksum

Full Changelog: v0.3.0...v0.3.1

v0.3.0

Changelog

• ad2aecb test: prepare the handler & add NoUpdateCheck case
• b1c956b feat: add NoUpdateCheck option
• b998626 chore: handle file not found error when getResources

Full Changelog: v0.2.2...v0.3.0

v0.2.2

Changelog

• 1f8a193 util: refactor getClientIP to extract only IP addr from RemoteAddr
• 9ad7e3f util(getClientIP): use index 0 of X-Forwarded-For if any

Full Changelog: v0.2.1...v0.2.2

v0.2.1

Changelog

• 7077d25: adjust cache exp & cleanup interval

Full Changelog: v0.2.0...v0.2.1

v0.2.0

Changelog

• 57505b8 add development mode/cache options
• 6e1b0e1 refactor(cwa): implement removeSpecialChars

Full Changelog: v0.1.2...v0.2.0

v0.1.2

Changelog

• fcb24ba: Setting request ID in the header for *Teler.Analyze method.

Full Changelog: v0.1.1...v0.1.2