refactor: Add HTTP3 specific modsec rule in web UI

bunkerity · Aug 7, 2024 · 80ac2f5 · 80ac2f5
1 parent efebf6b
commit 80ac2f5
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/common/core/ui/confs/modsec/ui.conf b/src/common/core/ui/confs/modsec/ui.conf
@@ -3,4 +3,7 @@ SecRule REQUEST_FILENAME "@rx /(global_config|services)$" "id:7771,ctl:ruleRemov
 SecRule REQUEST_FILENAME "@rx /configs$" "id:7772,ctl:ruleRemoveByTag=language-shell,ctl:ruleRemoveByTag=attack-lfi,ctl:ruleRemoveByTag=attack-rfi,ctl:ruleRemoveByTag=attack-ssrf,nolog"
 SecRule REQUEST_FILENAME "@rx /jobs$" "id:7773,ctl:ruleRemoveByTag=language-shell,ctl:ruleRemoveByTag=language-php,nolog"
 SecRule REQUEST_FILENAME "@rx /jobs/download$" "id:7774,ctl:ruleRemoveByTag=attack-lfi,nolog"
+{% if HTTP3 == "yes" +%}
+SecRuleRemoveById 920280
+{% endif +%}
 {% endif +%}