fix CVE-2021-20205 and examples update
This commit is contained in:
4
examples/wordpress/modsec-confs/wordpress.conf
Normal file
4
examples/wordpress/modsec-confs/wordpress.conf
Normal file
@@ -0,0 +1,4 @@
|
||||
SecRule REQUEST_FILENAME "/wp-admin/admin-ajax.php" "id:1,ctl:ruleRemoveByTag=attack-xss,ctl:ruleRemoveByTag=attack-rce"
|
||||
SecRule REQUEST_FILENAME "/wp-admin/options.php" "id:2,ctl:ruleRemoveByTag=attack-xss"
|
||||
SecRule REQUEST_FILENAME "^/wp-json/yoast" "id:3,ctl:ruleRemoveById=930120"
|
||||
SecRuleRemoveById 953120
|
||||
Reference in New Issue
Block a user