The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
2answers
36 views

Prevent request via IP address of server

I'm pretty sure there's a way to prevent access to a website through the server IP address and to force the user to enter the domain name instead. so that http://156.56.75.87 should trigger a 403 and ...
1
vote
1answer
91 views

Filtering content from response body HTML (mod_security or other WAFs)

We have Apache on Linux with mod_security as the Web App Firewall (WAF) layer. To prevent content injections, we have some rules that basically disable a page containing some text patterns from ...
1
vote
0answers
28 views

Regex isn't honored in mod_security2

SecRule REQUEST_URI "^/(|(.*)/)(lpt1|lpt2|lpt3|lpt4)(/|\.|\?|$)" "t:none,t:htmlEntityDecode,t:lowercase,t:removeWhitespace,block,msg:'X',id:'1000'" SecRule REQUEST_URI "^(.*)//(.*)$" ...