@@ -900,21 +900,6 @@ SecRule REQUEST_FILENAME "@endsWith /wp-admin/edit.php" \
900
900
ctl:ruleRemoveTargetByTag=OWASP_CRS;ARGS:s,\
901
901
ver:'wordpress-rule-exclusions-plugin/1.0.1'"
902
902
903
- # Wordpress Site Health
904
- # The wordpress site health page makes use of embedded SQL/PHP
905
- # which triggers PHP/SQL leak rules.
906
- SecRule REQUEST_FILENAME "@rx /wp-admin/site-health\.php$" \
907
- "id:9507840,\
908
- phase:2,\
909
- pass,\
910
- t:none,\
911
- nolog,\
912
- ver:'wordpress-rule-exclusions-plugin/1.0.1',\
913
- chain"
914
- SecRule REQUEST_METHOD "@streq GET" \
915
- "t:none,\
916
- ctl:ruleRemoveById=951220,\
917
- ctl:ruleRemoveById=953110"
918
903
919
904
#
920
905
# [ Helpers ]
@@ -967,15 +952,21 @@ SecRule REQUEST_FILENAME "@rx /wp-admin/load-(?:scripts|styles)\.php$" \
967
952
ctl:ruleRemoveTargetById=920100;REQUEST_LINE,\
968
953
ver:'wordpress-rule-exclusions-plugin/1.0.1'"
969
954
970
- # Site health output can trigger database error rule.
955
+ # Wordpress Site Health
956
+ # The wordpress site health page makes use of embedded SQL/PHP
957
+ # which triggers PHP/SQL leak rules.
971
958
SecRule REQUEST_FILENAME "@endsWith /wp-admin/site-health.php" \
972
959
"id:9507910,\
973
960
phase:1,\
974
961
pass,\
975
962
t:none,\
976
963
nolog,\
977
- ctl:ruleRemoveById=951220,\
978
- ver:'wordpress-rule-exclusions-plugin/1.0.1'"
964
+ ver:'wordpress-rule-exclusions-plugin/1.0.1',\
965
+ chain"
966
+ SecRule REQUEST_METHOD "@streq GET" \
967
+ "t:none,\
968
+ ctl:ruleRemoveById=951220,\
969
+ ctl:ruleRemoveById=953110"
979
970
980
971
981
972
#
0 commit comments