diff --git a/conf/modsecurity/crs/RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf b/conf/modsecurity/crs/RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf index 9b7839b9cddd62e15c4eb2fd50756cac18eb3daa..bca7c5764d099c75099c7519bee0685e468bd428 100644 --- a/conf/modsecurity/crs/RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf +++ b/conf/modsecurity/crs/RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf @@ -16,10 +16,13 @@ SecRuleRemoveById 950130 # XSS rules that have too many false positives. SecRuleRemoveById 941160 SecRuleRemoveById 941180 -SecRuleRemoveByID 953120 # ModSec Rule Exclusion: 920273 : Invalid character in request (outside of very strict set) # ModSec Rule Exclusion: 942432 : Restricted SQL Character Anomaly Detection (args): # number of special characters exceeded (2) (severity: NONE/UNKOWN) SecRuleRemoveById 920273 SecRuleRemoveById 942432 + +# Presence of PHP code in the output +SecRuleRemoveByID 953110 +SecRuleRemoveByID 953120