mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-08-15 23:55:03 +03:00
Emphasize the need to check REQBODY_PROCESSOR_ERROR in configuration example.
This commit is contained in:
parent
73706c8bc6
commit
3facacf92a
@ -30,3 +30,11 @@ SecRequestBodyInMemoryLimit 131072
|
|||||||
# Buffer response bodies of up to
|
# Buffer response bodies of up to
|
||||||
# 512 KB in length
|
# 512 KB in length
|
||||||
SecResponseBodyLimit 524288
|
SecResponseBodyLimit 524288
|
||||||
|
|
||||||
|
# Verify that we've correctly processed the request body.
|
||||||
|
# As a rule of thumb, when failing to process a request body
|
||||||
|
# you should reject the request (when deployed in blocking mode)
|
||||||
|
# or log a high-severity alert (when deployed in detection-only mode).
|
||||||
|
SecRule REQBODY_PROCESSOR_ERROR "!@eq 0" \
|
||||||
|
"phase:2,t:none,log,deny,msg:'Failed to parse request body.',severity:2"
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user