chore: upgrades to CRS 4.0.0-rc2 (#8)

magefile.go

@@ -11,12 +11,13 @@ import (
 	"bufio"
 	"bytes"
 	"fmt"
-	"github.com/magefile/mage/sh"
 	"io"
 	"net/http"
 	"os"
 	"path/filepath"
 	"strings"
+
+	"github.com/magefile/mage/sh"
 )
 
 func DownloadCRS() error {
@@ -35,6 +36,11 @@ func DownloadCRS() error {
 		return err
 	}
 	defer res.Body.Close()
+
+	if res.StatusCode != http.StatusOK {
+		return fmt.Errorf("unexpected status code: %d", res.StatusCode)
+	}
+
 	crsZip, err := io.ReadAll(res.Body)
 	if err != nil {
 		return err
@@ -102,7 +108,7 @@ func DownloadCRS() error {
 
 		source, err := f.Open()
 		if err != nil {
-			defer os.Remove(fPath)
+			os.Remove(fPath)
 			return err
 		}
 

rules/@crs-setup.conf.example

@@ -1,7 +1,7 @@
 # ------------------------------------------------------------------------
-# OWASP ModSecurity Core Rule Set ver.4.0.0-rc1
+# OWASP ModSecurity Core Rule Set ver.4.0.0-rc2
 # Copyright (c) 2006-2020 Trustwave and contributors. All rights reserved.
-# Copyright (c) 2021-2022 Core Rule Set project. All rights reserved.
+# Copyright (c) 2021-2023 Core Rule Set project. All rights reserved.
 #
 # The OWASP ModSecurity Core Rule Set is distributed under
 # Apache Software License (ASL) version 2