fix: SecAction can't be disabled via ctl action in libmodsecurity3 (#26)

Use `@unconditionalMatch` instead
coreruleset · Feb 16, 2024 · 47ad545 · 47ad545
1 parent 02e407f
commit 47ad545
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 3 deletions.
diff --git a/README.md b/README.md
@@ -3,8 +3,7 @@
 
 ## Description
 
-This plugin contains rule exclusions for [WordPress](https://wordpress.org/),
-a content management system (CMS), so it can be run flawlessly togather with
+This plugin contains rule exclusions for [WordPress](https://wordpress.org/), a content management system (CMS), so it can be run flawlessly together with
 OWASP CRS (CRS).
 
 ## Installation

diff --git a/plugins/wordpress-rule-exclusions-before.conf b/plugins/wordpress-rule-exclusions-before.conf
@@ -504,7 +504,7 @@ SecRule REQUEST_FILENAME "@endsWith /wp-admin/user-new.php" \
 #
 
 # _wp_http_referer and wp_http_referer are passed on a lot of wp-admin pages
-SecAction \
+SecRule REQUEST_FILENAME "@unconditionalMatch" \
     "id:9507600,\
     phase:2,\
     pass,\