Compare commits

..

1 Commits
1.0.0 ... main

Author SHA1 Message Date
Daniel Demus
5895e843db Suppress false positive on encoded % in URL 2024-11-16 20:57:44 +01:00

View File

@ -62,3 +62,5 @@ SecRule REQUEST_FILENAME "@beginsWith /rest" \
setvar:'tx.allowed_methods=%{tx.allowed_methods} PUT DELETE',\
setvar:'tx.allowed_request_content_type=%{tx.allowed_request_content_type} |text/plain|'"
# Disable CRS rule 920220, as % is often included in value formats
SecRule WEBAPPID "@unconditionalMatch" "id:93020,phase:1,pass,nolog,ctl:ruleRemoveById=920220"