From 7a35ed33bc305c62b4a3c5a6dc582f49c274bc71 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=2E=20Nam=C3=A8che?= Date: Thu, 12 Feb 2026 14:38:35 +0100 Subject: [PATCH] example: misc fixes --- example/ansible/vars/common.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/example/ansible/vars/common.yml b/example/ansible/vars/common.yml index a422916..b2d22b0 100644 --- a/example/ansible/vars/common.yml +++ b/example/ansible/vars/common.yml @@ -25,10 +25,12 @@ common: custom_cert: true custom_cert_file: "/etc/ssl/certs/test.lab.crt" custom_cert_key_file: "/etc/ssl/private/test.lab.key" + rate_limit_events: 10 + rate_limit_window: "1m" # filter_whitelist: ["10.60.117.1"] crs_plugins: - "wordpress-rule-exclusions" - crs_exceptions: +# crs_exceptions: # Cf. https://github.com/owasp-modsecurity/ModSecurity/wiki/Reference-Manual-(v3.x) # before_request: # - 'SecRule REQUEST_FILENAME "@endsWith /wp-admin/admin-ajax.php" "id:1,nolog,ctl:ruleRemoveById=932260"' @@ -37,7 +39,7 @@ common: header_cross_origin_embedder_policy: "unsafe-none" header_content_security_policy: worker-src: "'self' blob:" - img-src: "'self' data: https://secure.gravatar.com/avatar/" + img-src: "'self' data: https://secure.gravatar.com/avatar/ https://s.w.org/images/" font-src: "'self' data:" script-src: "'self' 'unsafe-eval'" script-src-elem: "'self' 'unsafe-inline'"