Open-source Web application firewall-naxsi

Naxsi is an openSource codeNginx web application firewall module with efficient and low maintenance rules. The main objective of naxsi is to help people reinforce their web applications.ProgramTo defend against SQL injection, cross-site scripting, cross-domain forgery requests, local and remote file inclusion vulnerabilities.

 

Currently, the main changes to naxsi are as follows:

* Feature: added support for file_ext. We can now control file uploads names/extensions as well.

* Added a rule for file_ext into naxsi_core.rules

* Added unit testing for file_ext feature

* Fixed erroneous log messages

* Fixed an error on whitelist of types $ URL: XXX | URL

 

Tool download: http://code.google.com/p/naxsi/downloads/list