From 1ce6bf7294f95e85aec56f4707bdcc8fd8fc41a5 Mon Sep 17 00:00:00 2001
From: ale <ale@incal.net>
Date: Fri, 11 Dec 2020 09:03:26 +0000
Subject: [PATCH] Whitelist more ARGS for eventlist
---
.../crs/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/conf/modsecurity/crs/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf b/conf/modsecurity/crs/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf
index f873e6a..58f6f42 100644
--- a/conf/modsecurity/crs/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf
+++ b/conf/modsecurity/crs/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf
@@ -38,5 +38,8 @@ SecRule REQUEST_FILENAME "@endsWith /wp-admin/admin-ajax.php" \
phase:2,\
pass,\
nolog,\
- ctl:ruleRemoveTargetByTag=CRS;ARGS:widget-event_list_widget[2][title]"
+ ctl:ruleRemoveTargetByTag=CRS;ARGS:widget-event_list_widget[1][title],\
+ ctl:ruleRemoveTargetByTag=CRS;ARGS:widget-event_list_widget[1][location_length],\
+ ctl:ruleRemoveTargetByTag=CRS;ARGS:widget-event_list_widget[2][title],\
+ ctl:ruleRemoveTargetByTag=CRS;ARGS:widget-event_list_widget[2][location_length]"
--
GitLab