fixing FP

coreruleset · Apr 25, 2024 · 944d8ff · 944d8ff
1 parent c9cfcce
commit 944d8ff
Showing 1 changed file with 20 additions and 2 deletions.
diff --git a/plugins/wordpress-rule-exclusions-before.conf b/plugins/wordpress-rule-exclusions-before.conf
@@ -97,8 +97,8 @@ SecRule REQUEST_FILENAME "@endsWith /wp-comments-post.php" \
     ver:'wordpress-rule-exclusions-plugin/1.0.1'"
 
 SecRule REQUEST_FILENAME "@endsWith /wp-admin/comment.php" \
-    "id:9507170,\
-    phase:2,\
+    "id:9507131,\
+    phase:1,\
     pass,\
     t:none,\
     nolog,\
@@ -108,6 +108,24 @@ SecRule REQUEST_FILENAME "@endsWith /wp-admin/comment.php" \
     ctl:ruleRemoveTargetByTag=OWASP_CRS;ARGS:newcomment_author,\
     ver:'wordpress-rule-exclusions-plugin/1.0.1'"
 
+# Replying to a comment
+SecRule REQUEST_FILENAME "@endsWith /wp-admin/admin-ajax.php" \
+    "id:9507132,\
+    phase:2,\
+    pass,\
+    t:none,\
+    nolog,\
+    ver:'wordpress-rule-exclusions-plugin/1.0.1',\
+    chain"
+    SecRule ARGS:action "@streq replyto-comment" \
+        "t:none,\
+        chain"
+        SecRule &ARGS:action "@eq 1" \
+            "t:none,\
+            ctl:ruleRemoveTargetById=941100;ARGS:content,\
+            ctl:ruleRemoveTargetById=941160;ARGS:content,\
+            ctl:ruleRemoveTargetById=941310;ARGS:content"
+
 
 #
 # [ Gutenberg Editor ]