@@ -205,23 +205,23 @@ SecRule &TX:static_extensions "@eq 0" \
205205# sql_error_match is used for shortcutting rules for performance reasons.
206206
207207SecAction \
208- "id:901200,\
209- phase:1,\
210- nolog,\
211- pass,\
212- t:none,\
213- setvar:tx.anomaly_score=0,\
214- setvar:tx.sql_injection_score=0,\
215- setvar:tx.xss_score=0,\
216- setvar:tx.rfi_score=0,\
217- setvar:tx.lfi_score=0,\
218- setvar:tx.rce_score=0,\
219- setvar:tx.php_injection_score=0,\
220- setvar:tx.http_violation_score=0,\
221- setvar:tx.session_fixation_score=0,\
222- setvar:tx.inbound_anomaly_score=0,\
223- setvar:tx.outbound_anomaly_score=0,\
224- setvar:tx.sql_error_match=0"
208+ "id:901200,\
209+ phase:1,\
210+ nolog,\
211+ pass,\
212+ t:none,\
213+ setvar:tx.anomaly_score=0,\
214+ setvar:tx.sql_injection_score=0,\
215+ setvar:tx.xss_score=0,\
216+ setvar:tx.rfi_score=0,\
217+ setvar:tx.lfi_score=0,\
218+ setvar:tx.rce_score=0,\
219+ setvar:tx.php_injection_score=0,\
220+ setvar:tx.http_violation_score=0,\
221+ setvar:tx.session_fixation_score=0,\
222+ setvar:tx.inbound_anomaly_score=0,\
223+ setvar:tx.outbound_anomaly_score=0,\
224+ setvar:tx.sql_error_match=0"
225225
226226
227227#
@@ -233,22 +233,22 @@ SecAction \
233233#
234234
235235SecRule REQUEST_HEADERS:User-Agent "^(.*)$" \
236- "id:901318, \
237- phase:1, \
238- t:none,t:sha1,t:hexEncode, \
239- setvar:tx.ua_hash=%{matched_var}, \
240- nolog, \
241- pass"
236+ "id:901318, \
237+ phase:1, \
238+ t:none,t:sha1,t:hexEncode, \
239+ setvar:tx.ua_hash=%{matched_var}, \
240+ nolog, \
241+ pass"
242242
243243SecAction \
244- "id:901321, \
245- phase:1, \
246- t:none, \
247- initcol:global=global, \
248- initcol:ip=%{remote_addr}_%{tx.ua_hash}, \
249- setvar:tx.real_ip=%{remote_addr}, \
250- nolog, \
251- pass"
244+ "id:901321, \
245+ phase:1, \
246+ t:none, \
247+ initcol:global=global, \
248+ initcol:ip=%{remote_addr}_%{tx.ua_hash}, \
249+ setvar:tx.real_ip=%{remote_addr}, \
250+ nolog, \
251+ pass"
252252
253253
254254#
@@ -280,44 +280,44 @@ SecAction \
280280#
281281
282282SecRule TX:sampling_percentage "@eq 100" \
283- "id:901400,\
284- phase:1,\
285- pass,\
286- nolog,\
287- skipAfter:END-SAMPLING"
283+ "id:901400,\
284+ phase:1,\
285+ pass,\
286+ nolog,\
287+ skipAfter:END-SAMPLING"
288288
289289SecRule UNIQUE_ID "@rx ^." \
290- "id:901410,\
291- phase:1,\
292- pass,\
293- nolog,\
294- t:sha1,\
295- t:hexEncode,\
296- setvar:TX.sampling_rnd100=%{MATCHED_VAR}"
290+ "id:901410,\
291+ phase:1,\
292+ pass,\
293+ nolog,\
294+ t:sha1,\
295+ t:hexEncode,\
296+ setvar:TX.sampling_rnd100=%{MATCHED_VAR}"
297297
298298SecRule DURATION "@rx (..)$" \
299- "id:901420,\
300- phase:1,\
301- pass,\
302- capture,\
303- nolog,\
304- setvar:TX.sampling_rnd100=%{TX.sampling_rnd100}%{TX.1}"
299+ "id:901420,\
300+ phase:1,\
301+ pass,\
302+ capture,\
303+ nolog,\
304+ setvar:TX.sampling_rnd100=%{TX.sampling_rnd100}%{TX.1}"
305305
306306SecRule TX:sampling_rnd100 "@rx ^[a-f]*([0-9])[a-f]*([0-9])" \
307- "id:901430,\
308- phase:1,\
309- pass,\
310- nolog,\
311- capture,\
312- setvar:TX.sampling_rnd100=%{TX.1}%{TX.2}"
307+ "id:901430,\
308+ phase:1,\
309+ pass,\
310+ nolog,\
311+ capture,\
312+ setvar:TX.sampling_rnd100=%{TX.1}%{TX.2}"
313313
314314SecRule TX:sampling_rnd100 "@rx ^0([0-9])" \
315- "id:901440,\
316- phase:1,\
317- pass,\
318- capture,\
319- nolog,\
320- setvar:TX.sampling_rnd100=%{TX.1}"
315+ "id:901440,\
316+ phase:1,\
317+ pass,\
318+ capture,\
319+ nolog,\
320+ setvar:TX.sampling_rnd100=%{TX.1}"
321321
322322
323323#
@@ -334,13 +334,13 @@ SecRule TX:sampling_rnd100 "@rx ^0([0-9])" \
334334
335335
336336SecRule TX:sampling_rnd100 "!@lt %{tx.sampling_percentage}" \
337- "id:901450,\
338- phase:1,\
339- pass,\
340- log,\
341- noauditlog,\
342- ctl:ruleEngine=off,\
343- msg:'Sampling: Disable the rule engine based on sampling_percentage \
337+ "id:901450,\
338+ phase:1,\
339+ pass,\
340+ log,\
341+ noauditlog,\
342+ ctl:ruleEngine=off,\
343+ msg:'Sampling: Disable the rule engine based on sampling_percentage \
344344%{TX.sampling_percentage} and random number %{TX.sampling_rnd100}.'"
345345
346346SecMarker "END-SAMPLING"
0 commit comments