Next-Gen WAF for NGINX (Lua) 1.0.0+411
- Originally HTTP methods that were inspected where explicitly listed (allowlisted, e.g. "GET", "POST"). The logic is now inverted to allow all methods not on an ignored list (blocklisted, e.g. "OPTIONS", "CONNECT"). This allows for the detection of invalid or malicious HTTP requests.
Prior change: Next-Gen WAF for NGINX (Lua) 1.0.0+408
Following change: Next-Gen WAF for NGINX (Lua) 1.0.0+416
