diff --git a/conf/modsecurity/crs/RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf b/conf/modsecurity/crs/RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf index ef94eed55ba932c2ea21a53ea5c871a36c87d356..6903e9eac6c0b9679be609587df21a968968871c 100644 --- a/conf/modsecurity/crs/RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf +++ b/conf/modsecurity/crs/RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf @@ -29,3 +29,7 @@ SecRuleRemoveByID 953120 # Filters dangerous file extensions in the URL. SecRuleRemoveByID 920440 + +# Having '../' in the response body. +SecRuleRemoveByID 930110 +