# ------------------------------------------------------------------------ # Gitea proxy rule exclusions plugin # Copyright (c) 2024 Daniel Demus # # This plugin is distributed under Apache Software License (ASL) version 2 # Please see the enclosed LICENSE file for full details. # ------------------------------------------------------------------------ # Plugin name: gitea-proxy-rule-exclusions # Plugin description: OWASP CRS 3rd party plugin for Gitea via proxy # Rule ID block base: 92,000 - 92,999 # Plugin version: 1.1.0 # Documentation can be found here: # https://git.demus.dk/demus/gitea-proxy-rule-exclusions-plugin.git # Generic rule to disable the plugin # # Plugins are enabled by default. # # They become active by placing them in the plugin folder. It is possible to # control plugin activation via setting a variable. This can be done in the # plugin config file here. # # The predefined variable name is meant to be "-plugin_enabled". # For the gitea-proxy-rule-exclusions-plugin, this means it can be disabled by setting # tx.gitea-proxy-rule-exclusions-plugin_enabled=0. # # Note that a global setting of this variable overrides the setting here. # That means the "enabled" variable is only set by this rule if it has not # been set before. # # Feel free to set the variable unconditionally here by replacing the # SecRule line with an unconditional SecAction statement. # # SecRule &TX:gitea-proxy-rule-exclusions-plugin_enabled "@eq 0" \ # "id:92000,\ # phase:1,\ # pass,\ # nolog,\ # ver:'gitea-proxy-rule-exclusions-plugin/1.1.0',\ # setvar:'tx.gitea-proxy-rule-exclusions-plugin_enabled=0'"