Skip to content

Commit c9cfcce

Browse files
authored
Removing duplicate rule (#39)
1 parent 9994e7a commit c9cfcce

File tree

1 file changed

+9
-18
lines changed

1 file changed

+9
-18
lines changed

Diff for: plugins/wordpress-rule-exclusions-before.conf

+9-18
Original file line numberDiff line numberDiff line change
@@ -900,21 +900,6 @@ SecRule REQUEST_FILENAME "@endsWith /wp-admin/edit.php" \
900900
ctl:ruleRemoveTargetByTag=OWASP_CRS;ARGS:s,\
901901
ver:'wordpress-rule-exclusions-plugin/1.0.1'"
902902

903-
# Wordpress Site Health
904-
# The wordpress site health page makes use of embedded SQL/PHP
905-
# which triggers PHP/SQL leak rules.
906-
SecRule REQUEST_FILENAME "@rx /wp-admin/site-health\.php$" \
907-
"id:9507840,\
908-
phase:2,\
909-
pass,\
910-
t:none,\
911-
nolog,\
912-
ver:'wordpress-rule-exclusions-plugin/1.0.1',\
913-
chain"
914-
SecRule REQUEST_METHOD "@streq GET" \
915-
"t:none,\
916-
ctl:ruleRemoveById=951220,\
917-
ctl:ruleRemoveById=953110"
918903

919904
#
920905
# [ Helpers ]
@@ -967,15 +952,21 @@ SecRule REQUEST_FILENAME "@rx /wp-admin/load-(?:scripts|styles)\.php$" \
967952
ctl:ruleRemoveTargetById=920100;REQUEST_LINE,\
968953
ver:'wordpress-rule-exclusions-plugin/1.0.1'"
969954

970-
# Site health output can trigger database error rule.
955+
# Wordpress Site Health
956+
# The wordpress site health page makes use of embedded SQL/PHP
957+
# which triggers PHP/SQL leak rules.
971958
SecRule REQUEST_FILENAME "@endsWith /wp-admin/site-health.php" \
972959
"id:9507910,\
973960
phase:1,\
974961
pass,\
975962
t:none,\
976963
nolog,\
977-
ctl:ruleRemoveById=951220,\
978-
ver:'wordpress-rule-exclusions-plugin/1.0.1'"
964+
ver:'wordpress-rule-exclusions-plugin/1.0.1',\
965+
chain"
966+
SecRule REQUEST_METHOD "@streq GET" \
967+
"t:none,\
968+
ctl:ruleRemoveById=951220,\
969+
ctl:ruleRemoveById=953110"
979970

980971

981972
#

0 commit comments

Comments
 (0)