JavaScript disabled You need to activate JavaScript in order to use OpenProject! Learn more

Top Menu

Jump to content

OpenProject
- View all projects

Home

Search

- Getting started
- Introduction video
  
  Welcome to OpenProject
  
  Get an overview
  
  Get a quick overview of project management and team collaboration with OpenProject.
  
  You can restart this video from the help menu
- Help and support
- User guides
- Videos
- Shortcuts
- Community forum
- Professional support
- Additional resources
- Legal notice
- Data privacy and security policy
- OpenProject website
- Security alerts / Newsletter
- OpenProject blog
- Release notes
- Report a bug
- Development roadmap
- Add and edit translations
- API documentation
Sign in

Side Menu

Overview
Activity
Roadmap
Work packages
Boards
Calendar
Forums
Wiki
- Table of contents
  - Expanded. Click to collapseCollapsed. Click to showDeveloper
    - Hierarchy leafAccessibility Checklist
    - Hierarchy leafCode Review Guidelines
    - Expanded. Click to collapseCollapsed. Click to showContribution
      Hierarchy leafGit Workflow
      Hierarchy leafTranslations
    - Expanded. Click to collapseCollapsed. Click to showDeveloping Plugins
      Hierarchy leafDeveloping an OmniAuth Authentication Plugin
    - Hierarchy leafRelease Process
    - Hierarchy leafReport a bug
    - Hierarchy leafSecurity
    - Hierarchy leafSetting up an OpenLDAP server for testing
    - Hierarchy leafTheme Features
  - Hierarchy leafDownload
  - Expanded. Click to collapseCollapsed. Click to showFeature tour
    - Hierarchy leafRelease Notes OpenProject 30
    - Expanded. Click to collapseCollapsed. Click to showRelease Notes OpenProject 30 - Overview
      Hierarchy leafGlossary
      Hierarchy leafRelease Notes - Accessibility
      Hierarchy leafRelease Notes - Accessibility changes
      Hierarchy leafRelease Notes - Add work package queries as menu items to sidebar
      Hierarchy leafRelease Notes - Copy projects based on Templates
      Hierarchy leafRelease Notes - Design changes
      Hierarchy leafRelease Notes - Fixed Bugs
      Hierarchy leafRelease Notes - Keyboard Shortcuts
      Hierarchy leafRelease Notes - Project settings
      Hierarchy leafRelease Notes - Ruby&Rails Update
      Hierarchy leafRelease Notes - Security
      Hierarchy leafRelease Notes - Timelines
      Hierarchy leafRelease Notes - Work packages
  - Hierarchy leafHowto create animated gifs
  - Hierarchy leafMigration Squashing
  - Hierarchy leafMod security
  - Hierarchy leafNew work package page
  - Hierarchy leafOP3 to OP4 Debian upgrade
  - Hierarchy leafOP4 Ubuntu1404 Stable with MySQL in production
  - Hierarchy leafOpenProject 40 Development Setup
  - Expanded. Click to collapseCollapsed. Click to showOpenProject Foundation
    - Hierarchy leafBoards
    - Hierarchy leafMembers
    - Hierarchy leafOPF-Meetings
    - Hierarchy leafStatutes
  - Expanded. Click to collapseCollapsed. Click to showRelease Notes
    - Hierarchy leafOpenProject released on Bitnami
  - Expanded. Click to collapseCollapsed. Click to showRelease Notes OpenProject 40 - Overview
    - Hierarchy leafRelease Notes OpenProject 40 - Accessibility improvements
    - Hierarchy leafRelease Notes OpenProject 40 - Column header functions in work package table
    - Hierarchy leafRelease Notes OpenProject 40 - Improved Design
    - Hierarchy leafRelease Notes OpenProject 40 - Integrated query title on work package page
    - Hierarchy leafRelease Notes OpenProject 40 - Integrated toolbar on work package page
    - Hierarchy leafRelease Notes OpenProject 40 - OmniAuth integration for OpenProject
    - Hierarchy leafRelease Notes OpenProject 40 - Work package details pane
  - Expanded. Click to collapseCollapsed. Click to showSupport
    - Expanded. Click to collapseCollapsed. Click to showDownload and Installation
      Hierarchy leafInstallation MacOS
      Expanded. Click to collapseCollapsed. Click to showInstallation OpenProject 3 0
      Hierarchy leafDebian Stable with MySQL in production
      Hierarchy leafInstallation on Centos 65 x64 with Apache and PostgreSQL 93
      Hierarchy leafInstallation Ubuntu
      Hierarchy leafInstallation Windows
      Expanded. Click to collapseCollapsed. Click to showInstallation OpenProject 40
      Hierarchy leafOP4 Debian Stable with MySQL in production
      Expanded. Click to collapseCollapsed. Click to showMigration paths
      Hierarchy leafFrom Chilliproject to OpenProject
      Hierarchy leafMigration 15 to 30
      Hierarchy leafMigration 24 to 30
      Hierarchy leafMigration Redmine 2x › OpenProject 30
      Hierarchy leafOpenProject 3 Migration
      Hierarchy leafOpenProject 40
    - Expanded. Click to collapseCollapsed. Click to showNews
      Hierarchy leafNew design for OpenProject
      Hierarchy leafNew OpenProject Translations Plugin
      Hierarchy leafNew Plugin on OpenProjectorg Local Avatars
      Hierarchy leafNews Accessibility workshop for OpenProject
      Hierarchy leafNews Glossary for OpenProject
      Hierarchy leafNews Heartbleed fixed
      Hierarchy leafNews Icon Fonts
      Hierarchy leafNews OpenProject 30 Release
      Hierarchy leafNews Release GitHub Integration Plugin
      Hierarchy leafNews Success Story Deutsche Telekom
      Hierarchy leafNews Timelines
      Hierarchy leafOpenProject 3013 released
      Hierarchy leafOpenProject 3017 released
      Hierarchy leafOpenProject 405 released
      Hierarchy leafOpenProject 40 released
      Hierarchy leafOpenProject 40 will be coming soon
      Hierarchy leafOpenProject and pkgrio
      Hierarchy leafOpenProjectBitnami
      Hierarchy leafOpenProject news moved to a new blog
      Hierarchy leafPackager version with plugins released ("Community edition")
      Hierarchy leafRegistration OpenProject-Foundation
      Hierarchy leafRelease OpenProject AuthPlugins
      Hierarchy leafUpdates on OpenProject
      Hierarchy leafWe need your feedback for the the new fullscreen view for work packages
    - Hierarchy leafOpenProject Plug-Ins
  - Hierarchy leafWiki

You are here:

Mod security

Content

Mod security

More
- Table of contents

Mod security

We recommend to use the apache module mod_security.

A good installation guide for Ubuntu 12.04 LTS can be found here
Note: The master branch of the OWASP Core Rule Set from https://github.com/SpiderLabs/owasp-modsecurity-crs/tarball/master cannot be installed at the time of writing 2013-11-11.
Version 2.2.5 from https://github.com/SpiderLabs/owasp-modsecurity-crs/archive/v2.2.5.tar.gz worked without problems. However, you should try newer versions, if possible.

The following rules are tested:

modsecurity_crs_20_protocol_violations.conf to protect against NULL-Bytes in user inputs (#1750)

Loading...