About this project

This repository contains libmodsecurity, the library component of ModSecurity v3. It loads and interprets rules in the ModSecurity SecRules format and applies ModSecurity processing to HTTP content supplied by connectors. The architecture separates the core library from Apache, Nginx, IIS, and other connectors, which are maintained as separate projects. The library is written in C++17 and provides C and C++ interfaces, with examples for creating rule sets and processing connection, URI, request, and response phases. It supports HTTP traffic monitoring, logging, and intervention checks. Rule-related capabilities include regular-expression operators and optional XSS and SQL injection detection through libinjection; optional dependencies can add remote rules, persistent storage, Lua scripting, XML processing, and MaxMind database support. The source tree includes unit and regression tests, a SecRules conformance test suite, Doxygen documentation, and a benchmark tool. ModSecurity v2 for Apache remains available in a separate maintenance branch.