Monthly meeting agenda (August 2023)

[jptosso]

• Date: Wednesday, August 30 at 12 p.m. UTC
• Previous agenda: Monthly meeting agenda (July 2023) #851

Current agenda

1. General project status
   • The status of the issues opened by users outside of the team (@jcchavezs)
     • High RAM Consumption when activating the WAF on multiple sites coraza-caddy#76
     • Missing hostname in WAF logs coraza-caddy#75
     • Some services return a blank 200 page with Coraza enabled coraza-caddy#71
     • Increase Memory wasm runtime coraza-proxy-wasm#223
     • May lead to memory leak and poor performance coraza-proxy-wasm#219
     • AuditLog parity with libmodsecurity3 #856
   • The status of connectors towards the production level (@jcchavezs)
2. AuditLog parity with libmodsecurity3 #856 (@amsnek)
3. To expose directives APi to create a directive #864 (@VermaShivansh)
4. first persistence draft #866 (@jptosso)
5. CRS multiline regexes might lead to false positives (multiline regex rules with inconsistent behaviour across engines coreruleset/coreruleset#3277) (@M4tteoP)
6. Review monthly meetings format (@jcchavezs)
7. Avoid compiling rules if paranoia is greater than default paranoia (Core Ruleset) (@jcchavezs)
8. Export http helper functions #774
9. SecResponseBodyMimeType should support regex #736

How to join?

1. Join OWASP slack: https://owasp.org/slack/invite
2. Join the #coraza channel: https://owasp.slack.com/archives/C02BXH135AT

Calendar Event

Download calendar event (ICS)

[jcchavezs]

I will be OOO tomorrow but what I would really like to see in the meeting in the `General project status` would be: - The status of the issues opened by users outside of the team. - The status of connectors towards production level: Caddy should be in the top priority and we should really flag coraza-spoa as it is a big burden. Also talk about the memory issues reported both in caddy and proxy-wasm. - As outcome I think we should be come up with list of TODOs and people commited to them within a week. If monthly meetings are not for flagging and focusing on these issues I don't think they are useful at all. Does that make sense?

…

On Mon, 21 Aug 2023, 12:19 Juan Pablo Tosso, ***@***.***> wrote: - *Date:* *Wednesday, August 30 at 12 p.m. UTC* <https://dateful.com/convert/utc?t=12pm&d=2023-02-21> - *Previous agenda:* #851 <#851> Current agenda 1. General project status 2. v3.0.3 release <#856> 3. How do we handle tutorials and blog posts <#864> 4. Persistence PR <#866> How to join? 1. Join OWASP slack: https://owasp.org/slack/invite 2. Join the #coraza channel: https://owasp.slack.com/archives/C02BXH135AT Calendar Event Download calendar event (ICS) <https://calendar.google.com/calendar/ical/c_s1vf6auene1ehionfslv010tk8%40group.calendar.google.com/public/basic.ics> — Reply to this email directly, view it on GitHub <#868>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAXOYAXE6TH5QAUJLOZTXQLXWMY4JANCNFSM6AAAAAA3YE4UJA> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[fzipi]

The meeting is next week 😎