itik/bgwaf
Private
Public Access
2
0
Fork 0
Code Issues Pull Requests Releases 9 Activity

example: misc fixes

Browse Source
This commit is contained in:
Sébastien NAMECHE
2026-02-12 14:38:35 +01:00
parent 1260ffcac0
commit 7a35ed33bc
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
example/ansible/vars/common.yml
View File

@@ -25,10 +25,12 @@ common:
custom_cert: true custom_cert: true
custom_cert_file: "/etc/ssl/certs/test.lab.crt" custom_cert_file: "/etc/ssl/certs/test.lab.crt"
custom_cert_key_file: "/etc/ssl/private/test.lab.key" custom_cert_key_file: "/etc/ssl/private/test.lab.key"
rate_limit_events: 10
rate_limit_window: "1m"
# filter_whitelist: ["10.60.117.1"] # filter_whitelist: ["10.60.117.1"]
crs_plugins: crs_plugins:
- "wordpress-rule-exclusions" - "wordpress-rule-exclusions"
crs_exceptions: # crs_exceptions:
# Cf. https://github.com/owasp-modsecurity/ModSecurity/wiki/Reference-Manual-(v3.x) # Cf. https://github.com/owasp-modsecurity/ModSecurity/wiki/Reference-Manual-(v3.x)
# before_request: # before_request:
# - 'SecRule REQUEST_FILENAME "@endsWith /wp-admin/admin-ajax.php" "id:1,nolog,ctl:ruleRemoveById=932260"' # - 'SecRule REQUEST_FILENAME "@endsWith /wp-admin/admin-ajax.php" "id:1,nolog,ctl:ruleRemoveById=932260"'
@@ -37,7 +39,7 @@ common:
header_cross_origin_embedder_policy: "unsafe-none" header_cross_origin_embedder_policy: "unsafe-none"
header_content_security_policy: header_content_security_policy:
worker-src: "'self' blob:" worker-src: "'self' blob:"
img-src: "'self' data: https://secure.gravatar.com/avatar/" img-src: "'self' data: https://secure.gravatar.com/avatar/ https://s.w.org/images/"
font-src: "'self' data:" font-src: "'self' data:"
script-src: "'self' 'unsafe-eval'" script-src: "'self' 'unsafe-eval'"
script-src-elem: "'self' 'unsafe-inline'" script-src-elem: "'self' 'unsafe-inline'"