Skip to content

Releases: merchantprotocol/docker-nginx-node20

v1.1.0

25 Mar 21:37

Choose a tag to compare

Changes

  • ModSecurity defaults to DetectionOnly — the WAF now ships in log-only mode by default, preventing it from silently blocking proxied requests in new applications
  • Runtime modsec-exclusions.conf support — apps can place a nginx.d/modsec-exclusions.conf file to override the SecRuleEngine mode (On, DetectionOnly, or Off) at container startup
  • Updated SOC 2 compliance docs to reflect the new default and opt-in blocking model