Disable XSS ModSec rules for wpmu-custom-css

Fixes issue ai3/prod#195.

Disable XSS ModSec rules for wpmu-custom-css
076f5260 · ale · 3c32902c · 076f5260
Commit 076f5260 authored 4 years ago by ale
--- a/conf/modsecurity/crs/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf
+++ b/conf/modsecurity/crs/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf
@@ -15,3 +15,10 @@ SecRule REQUEST_URI "@beginsWith /wp-admin/site-health.php" \
    pass,\
    nolog,\
    ctl:ruleEngine=Off"
+
+SecRule REQUEST_URI "@beginsWith /wp-admin/themes.php" \
+    "id:1002,\
+    pass,\
+    nolog,\
+    ctl:ruleRemoveByTag=attack-xss"
+