chore: création d'un règle un peu plus souple pour modsecurity

mission-apprentissage · Oct 7, 2024 · 300f9f3 · 300f9f3
1 parent 41f6543
commit 300f9f3
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/reverse_proxy/app/nginx/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf b/reverse_proxy/app/nginx/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf
@@ -0,0 +1,15 @@
+SecAction \
+ "id:900110,\
+ phase:1,\
+ nolog,\
+ pass,\
+ t:none,\
+ setvar:tx.inbound_anomaly_score_threshold=40"
+
+SecAction \
+ "id:900111,\
+ phase:1,\
+ nolog,\
+ pass,\
+ t:none,\
+ setvar:tx.outbound_anomaly_score_threshold=40"