Disable UNIX command rule for repo name parameter in create and settings

2025-03-23 21:43:01 +01:00
parent eb7dff9db4
commit 405f6ee04f
1 changed files with 16 additions and 0 deletions
@@ -94,6 +94,22 @@ SecRule REQUEST_URI "@beginsWith /api/packages" \
    setvar:'tx.allowed_methods=%{tx.allowed_methods} PUT DELETE',\
    ctl:requestBodyLimit=1073741824"

+# Disable UNIX command checking on the repo create name ARGS
+SecRule REQUEST_URI "@streq /repo/create" \
+    "id:92013,\
+    phase:1,\
+    t:none,\
+    pass,\
+    ctl:ruleRemoveTargetById=932260;ARGS:repo_name"
+
+# Disable UNIX command checking on the repo settings name ARGS
+SecRule REQUEST_URI "@endsWith settings" \
+    "id:92014,\
+    phase:1,\
+    t:none,\
+    pass,\
+    ctl:ruleRemoveTargetById=932260;ARGS:repo_name"
+
 # Provide a way to whitelist filenames that are in restricted-files.data
 SecRule REQUEST_FILENAME "@pmFromFile gitea-proxy-whitelisted-files.data" \
    "id:92020,\