Upgrade libddwaf to 1.30.0, enable extra cap, bump to 1.10.0 (#271)

cataphract · web-flow · commit 39de9cb4be87 · 2025-11-07T16:38:39.000Z
* Upgrade WAF and enable extra capabilities

* Bump to 1.10.0
diff --git a/CMakeLists.txt b/CMakeLists.txt
@@ -7,7 +7,7 @@ set(CMAKE_EXPORT_COMPILE_COMMANDS ON)
 cmake_policy(SET CMP0068 NEW)
 cmake_policy(SET CMP0135 NEW)
 
-set(NGINX_DATADOG_VERSION 1.9.0)
+set(NGINX_DATADOG_VERSION 1.10.0)
 project(ngx_http_datadog_module VERSION ${NGINX_DATADOG_VERSION})
 
 option(NGINX_DATADOG_ASM_ENABLED "Build with libddwaf" ON)
diff --git a/libddwaf b/libddwaf
@@ -1 +1 @@
-Subproject commit bbe9915d53d5964f3a73a8de8c9cfe9bb80e3b6c
+Subproject commit 00e895f2c507a714062aa88ed41466aec10d2e01
diff --git a/src/security/waf_remote_cfg.cpp b/src/security/waf_remote_cfg.cpp
@@ -279,6 +279,8 @@ class AsmConfigListener : public ProductListener<AsmConfigListener> {
       Capability::ASM_REQUEST_BLOCKING,
       Capability::ASM_RESPONSE_BLOCKING,
       Capability::ASM_EXCLUSIONS,
+      Capability::ASM_PREPROCESSOR_OVERRIDES,
+      Capability::ASM_CUSTOM_DATA_SCANNERS,
       static_cast<Capability>(static_cast<std::uint64_t>(1)
                               << 42) /* ASM_DD_MULTICONFIG */,
       static_cast<Capability>(static_cast<std::uint64_t>(1)
