From 524d28fd583c9dabf0eb0cc2dac720d81bb9ac21 Mon Sep 17 00:00:00 2001 From: ale <ale@incal.net> Date: Sat, 11 Nov 2023 14:57:09 +0000 Subject: [PATCH] Allow JSON-LD profile spec in request Content-Type --- docker/conf/modsecurity/crs/crs-setup.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/conf/modsecurity/crs/crs-setup.conf b/docker/conf/modsecurity/crs/crs-setup.conf index 2d004a43..5db1db9d 100644 --- a/docker/conf/modsecurity/crs/crs-setup.conf +++ b/docker/conf/modsecurity/crs/crs-setup.conf @@ -394,7 +394,7 @@ SecAction \ nolog,\ pass,\ t:none,\ - setvar:'tx.allowed_request_content_type=|application/x-www-form-urlencoded| |multipart/form-data| |multipart/related| |text/xml| |application/xml| |application/soap+xml| |application/x-amf| |application/json| |application/cloudevents+json| |application/cloudevents-batch+json| |application/octet-stream| |application/csp-report| |application/xss-auditor-report| |application/activity+json| |application/ld+json| |text/plain|'" + setvar:'tx.allowed_request_content_type=|application/x-www-form-urlencoded| |multipart/form-data| |multipart/related| |text/xml| |application/xml| |application/soap+xml| |application/x-amf| |application/json| |application/cloudevents+json| |application/cloudevents-batch+json| |application/octet-stream| |application/csp-report| |application/xss-auditor-report| |application/activity+json| |application/ld+json| |application/ld+json; profile=\"https://www.w3.org/ns/activitystreams\"| |text/plain|'" # Allowed HTTP versions. # Default: HTTP/1.0 HTTP/1.1 HTTP/2 HTTP/2.0 -- GitLab