mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2026-01-13 06:57:10 +03:00
Remove XML targets from core rules.
This commit is contained in:
@@ -76,14 +76,6 @@ SecResponseBodyMimeType (null) text/html text/plain text/xml
|
||||
SecResponseBodyLimit 524288
|
||||
|
||||
|
||||
# Initiate XML Processor in case of xml content-type
|
||||
#
|
||||
# TODO Remove this rule if you don't wish to parse XML request
|
||||
# Note that this will disable XML protection
|
||||
SecRule REQUEST_HEADERS:Content-Type "text/xml" \
|
||||
"phase:1,pass,nolog,ctl:requestBodyProcessor=XML"
|
||||
|
||||
|
||||
# What to do when an error is encountered.
|
||||
#
|
||||
# The default is to log the error and let the request go through.
|
||||
|
||||
Reference in New Issue
Block a user