feat: add support for nextcloud news

README.md

@@ -27,12 +27,12 @@ Additional apps may be supported if there is enough demand from the community, b
 | Nextcloud Recognize                 |  Supported ✅     |
 | Nextcloud Cookbook                  |  Supported ✅     |
 | Nextcloud Files HPB (Notify_Push)   |  Supported ✅     |
+| Nextcloud News                      |  Supported ✅     |
 | Nextcloud Talk                      |  Not supported ❌ |
 | Nextcloud Forms                     |  Not supported ❌ |
 | Nextcloud Polls                     |  Not supported ❌ |
 | Nextcloud Unspash                   |  Not supported ❌ |
 | Nextcloud Collectives               |  Not supported ❌ |
-| Nextcloud News                      |  Not supported ❌ |
 | Nextcloud Maps                      |  Not supported ❌ |
 | Cospend                             |  Not supported ❌ |
 | Breeze Dark                         |  Not supported ❌ |

plugins/nextcloud-rule-exclusions-before.conf

@@ -1157,7 +1157,8 @@ SecRule REQUEST_FILENAME "@rx /ocs/v[0-9.]+\.php/apps/provisioning_api/api/v[0-9
     t:none,\
     nolog,\
     ver:'nextcloud-rule-exclusions-plugin/1.3.1',\
-    ctl:ruleRemoveTargetById=931130;ARGS:json.value"
+    ctl:ruleRemoveTargetById=931130;ARGS:json.value,\
+    ctl:ruleRemoveTargetById=931130;ARGS:value"
 
 # Administration Settings --> Basic Settings --> Email Server
 # Configurating an SMTP server for email notifications
@@ -1392,6 +1393,7 @@ SecRule REQUEST_FILENAME "@rx ^/(?:index\.php/apps/news/api/v[0-9\-.]+|apps/news
     ctl:ruleRemoveTargetById=942430;ARGS:url,\
     ctl:ruleRemoveTargetById=942431;ARGS:url,\
     ctl:ruleRemoveTargetById=942432;ARGS:url,\
+    ctl:ruleRemoveTargetById=920273;REQUEST_BODY,\
     ctl:ruleRemoveTargetByTag=OWASP_CRS;ARGS:json.password,\
     ctl:ruleRemoveTargetByTag=OWASP_CRS;ARGS:password"