diff --git a/plugins/wordpress-rule-exclusions-before.conf b/plugins/wordpress-rule-exclusions-before.conf index 90fc7f9..ff84843 100644 --- a/plugins/wordpress-rule-exclusions-before.conf +++ b/plugins/wordpress-rule-exclusions-before.conf @@ -97,8 +97,8 @@ SecRule REQUEST_FILENAME "@endsWith /wp-comments-post.php" \ ver:'wordpress-rule-exclusions-plugin/1.0.1'" SecRule REQUEST_FILENAME "@endsWith /wp-admin/comment.php" \ - "id:9507170,\ - phase:2,\ + "id:9507131,\ + phase:1,\ pass,\ t:none,\ nolog,\ @@ -108,6 +108,24 @@ SecRule REQUEST_FILENAME "@endsWith /wp-admin/comment.php" \ ctl:ruleRemoveTargetByTag=OWASP_CRS;ARGS:newcomment_author,\ ver:'wordpress-rule-exclusions-plugin/1.0.1'" +# Replying to a comment +SecRule REQUEST_FILENAME "@endsWith /wp-admin/admin-ajax.php" \ + "id:9507132,\ + phase:2,\ + pass,\ + t:none,\ + nolog,\ + ver:'wordpress-rule-exclusions-plugin/1.0.1',\ + chain" + SecRule ARGS:action "@streq replyto-comment" \ + "t:none,\ + chain" + SecRule &ARGS:action "@eq 1" \ + "t:none,\ + ctl:ruleRemoveTargetById=941100;ARGS:content,\ + ctl:ruleRemoveTargetById=941160;ARGS:content,\ + ctl:ruleRemoveTargetById=941310;ARGS:content" + # # [ Gutenberg Editor ]