Changes the behavior of the default sec actions

Fix #1629
This commit is contained in:
Felipe Zimmerle
2018-05-31 14:33:13 -03:00
parent 61c956e3f2
commit 202a15bea8
5 changed files with 27 additions and 26 deletions

View File

@@ -278,8 +278,8 @@
"rules":[
"SecRuleEngine On",
"SecDefaultAction \"phase:2,log,auditlog,status:302,redirect:'http://www.google.com'\"",
"SecRule REQUEST_HEADERS \"@contains PHPSESSID\" \"phase:2,id:1\"",
"SecRule TX \"@contains to_test\" \"id:2,t:lowercase,t:none\""
"SecRule REQUEST_HEADERS \"@contains PHPSESSID\" \"phase:2,id:1,block\"",
"SecRule TX \"@contains to_test\" \"id:2,t:lowercase,t:none,block\""
]
}
]