Re: Recommended rule exclusions for WYSIWYG editor editing
Quinn Comendant <[email protected]> Sun, 31 Oct 2021 10:49:03 -0600
| Newsgroups | gmane.comp.apache.mod-security.user |
|---|---|
| Message-ID | <[email protected]> |
On 31 Oct 2021 13:39:57, Reindl Harald wrote:
> <LocationMatch "(.*)\/editor\/plugins\/preview\.php$">
I like this solution too.
Also, if your editors are connecting from a fixed location or use a VPN, you can turn off SecRequestBodyAccess for a specific IP address either by using:
<If "-R '111.222.333.444'">
SecRequestBodyAccess Off
</If>
or:
SecRule REMOTE_ADDR "^111.222.333.444" "phase:1,nolog,allow,ctl:responseBodyAccess=Off,id:1001"
Regards,
Quinn
_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/