Skip to content

Commit 1ef072c

Browse files
authored
Merge pull request #294 from Kuppit/main
fix: use MODSEC_ARGUMENTS_LIMIT in SecRule for argument count limit
2 parents 98f6986 + 85701d3 commit 1ef072c

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/etc/modsecurity.d/modsecurity.conf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ SecRule REQUEST_HEADERS:Content-Type "^(?:application(?:/soap\+|/)|text/)xml" \
4343
"id:'200000',phase:1,t:none,t:lowercase,pass,nolog,ctl:requestBodyProcessor=XML"
4444
SecRule REQUEST_HEADERS:Content-Type "^application/json" \
4545
"id:'200001',phase:1,t:none,t:lowercase,pass,nolog,ctl:requestBodyProcessor=JSON"
46-
SecRule &ARGS "@ge 1000" \
46+
SecRule &ARGS "@ge ${MODSEC_ARGUMENTS_LIMIT}" \
4747
"id:'200007', phase:2,t:none,log,deny,status:400,msg:'Failed to fully parse request body due to large argument count',severity:2"
4848
SecRule REQBODY_ERROR "!@eq 0" \
4949
"id:'200002', phase:2,t:none,log,deny,status:400,msg:'Failed to parse request body.',logdata:'%{reqbody_error_msg}',severity:2"

0 commit comments

Comments
 (0)