Using Plugins

Plugins can extend most Coraza functionalities like, audit logging, geo ip, operators, actions, transformations and body processors.

Plugins must be included in your project’s main package, for example:

package main

include(
  "github.com/coraza-waf/coraza/v2"
  _ "github.com/jptosso/coraza-libinjection"
)

The previous code will automatically add the @detectXSS and @detectSQLi operators. (Please note this plugin requires libinjection)