OPNsense Forum

English Forums => Web Proxy Filtering and Caching => Topic started by: ynth on May 15, 2026, 02:57:34 PM

Title: Ngix - NSXI - WAF - Can we White List Internal rules ?
Post by: ynth on May 15, 2026, 02:57:34 PM
Hello

I am facing a strange situation when NAXSI blocks json request for a web site. The error message states that NAXSI is blocking due to id0=15..

The only way managed to bypass the error was to manually edit the ngix.conf file on location section and add the line :


location  / {
    SecRulesEnabled;
    BasicRule wl:19;
    BasicRule wl:15; --ADDED--


Which on next NGING reload from the gui will be gone.

As per the GitHub Rule 15 is the following :
invalid_json
id: 15
action: block
impact: pass-thru on BODY (json)
JSON is malformed (ie. missing } ]).


Is there any alternative to either disable NXSI Internal rule 15 or somehow to keep the added line on the nginx.conf file ?


Best Regards