diff --git a/plugin.yaml b/plugin.yaml new file mode 100644 index 0000000..e5f3ad4 --- /dev/null +++ b/plugin.yaml @@ -0,0 +1,42 @@ +# OWASP CRS Plugin Descriptor +# https://github.com/coreruleset/plugin-registry + +schema_version: 1 + +plugin: + name: "phpbb-rule-exclusions-plugin" + description: "CRS rule exclusions for phpBB forum software" + long_description: | + Provides targeted rule exclusions to eliminate false positives when + running OWASP CRS in front of phpBB, the flat-forum bulletin board + software. Covers login, registration, password change, posting, + private messages, profile signature, admin settings, installation, + and the Tapatalk mobile app integration. + type: "official" + category: "rule-exclusion" + status: "tested" + license: "Apache-2.0" + authors: + - name: "OWASP CRS Team" + url: "https://coreruleset.org" + repository: "https://github.com/coreruleset/phpbb-rule-exclusions-plugin" + keywords: + - "phpbb" + - "forum" + - "rule-exclusion" + - "false-positive" + +rule_id_range: + start: 9512000 + end: 9512999 + +compatibility: + crs_version: ">=4.0.0" + +configuration: + file: "plugins/phpbb-rule-exclusions-config.conf" + variables: + - name: "tx.phpbb-rule-exclusions-plugin_enabled" + type: "boolean" + default: 1 + description: "Enable or disable phpBB rule exclusions (0 to disable)"