mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-09-30 03:34:29 +03:00
Forces disruptive to be first-rule-only
ModSecurity version 3 is capable to handle disruptive actions in different rules from the chain. However, lets get it working in the same fashion that we have in version 2.
This commit is contained in:
@@ -35,9 +35,9 @@
|
||||
},
|
||||
"rules":[
|
||||
"SecRuleEngine On",
|
||||
"SecRule ARGS:keyI \"@contains value\" \"chain,id:28\"",
|
||||
"SecRule ARGS:keyI \"@contains value\" \"chain,id:28,pass\"",
|
||||
"SecRule ARGS:keyII \"@contains other_value\" \"chain\"",
|
||||
"SecRule MATCHED_VARS_NAMES \"@contains asdf\" \"pass\""
|
||||
"SecRule MATCHED_VARS_NAMES \"@contains asdf\" \"\""
|
||||
]
|
||||
},
|
||||
{
|
||||
@@ -76,9 +76,9 @@
|
||||
},
|
||||
"rules":[
|
||||
"SecRuleEngine On",
|
||||
"SecRule ARGS:keyI \"@contains value\" \"chain,id:28\"",
|
||||
"SecRule ARGS:keyI \"@contains value\" \"chain,id:28,pass\"",
|
||||
"SecRule ARGS:keyII \"@contains other_value\" \"chain\"",
|
||||
"SecRule MATCHED_VARS_NAMES \"@contains asdf\" \"pass\"",
|
||||
"SecRule MATCHED_VARS_NAMES \"@contains asdf\" \"\"",
|
||||
"SecRule MATCHED_VARS_NAMES \"@contains value\" \"id:29\""
|
||||
]
|
||||
}
|
||||
|
Reference in New Issue
Block a user