Relax mod_security rules for CSS customization plugin

docker/conf/modsecurity/crs/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf

@@ -71,12 +71,14 @@ SecRule REQUEST_URI "@beginsWith /wp-admin/network/settings.php" \
     ctl:ruleRemoveTargetByTag=OWASP_CRS;ARGS:wp-piwik[tracking_code],\
     ctl:ruleRemoveTargetByTag=OWASP_CRS;ARGS:wp-piwik[noscript_code]"
 
-# Gutenberg comments are misinterpreted.
-SecRule REQUEST_URI "@beginsWith /wp-json/wp/v2/template-parts" \
+# Gutenberg comments are misinterpreted, and CSS customizations trigger
+# noisy SQL injection rules.
+SecRule REQUEST_URI "@beginsWith /wp-json/wp/v2/" \
     "id:1011,\
     phase:2,\
     pass,\
     nolog,\
+    ctl:ruleRemoveById=942100,\
     ctl:ruleRemoveTargetByID=932105;ARGS:content,\
     ctl:ruleRemoveTargetByID=941100;ARGS:content"