Talk:ModSecurity

From MediaWiki.org
Jump to navigation Jump to search

I ran into a similar problem...mod_security2 on apache2 would just fail sometimes...I added this to /usr/local/apache/conf/modesec2/exclude.conf

## Fixes a problem for certain content of wiki pages.
<LocationMatch "/wiki/index.php*">
  SecRuleRemoveById 300016
</LocationMatch>

— Preceding unsigned comment added by 174.59.192.74 (talkcontribs) 15:45, 12 March 2010 174.59.192.74

ModSecurity is filtering legitimate content[edit]

I found that ModSecurity would would trip and block any page with the word "Casino" (and presumably other spammy words) from being edited, history, protected etc. Just thought that information may be useful. 194.75.14.28 19:12, 29 May 2016 (UTC)

I found the same. In my case, the wiki is supposed to contain code in a programming language. ModSecurity howev er thinks all if statements in page content are not allowed. Seems I still need to fix the config somehow... --2001:16B8:1021:9D00:40E7:7BDA:221C:32C0 23:47, 11 April 2020 (UTC)