Ngix - NSXI - WAF - Can we White List Internal rules ?

Started by ynth, Today at 02:57:34 PM

Previous topic - Next topic
Hello

I am facing a strange situation when NAXSI blocks json request for a web site. The error message states that NAXSI is blocking due to id0=15..

The only way managed to bypass the error was to manually edit the ngix.conf file on location section and add the line :


location  / {
    SecRulesEnabled;
    BasicRule wl:19;
    BasicRule wl:15; --ADDED--


Which on next NGING reload from the gui will be gone.

As per the GitHub Rule 15 is the following :
invalid_json
id: 15
action: block
impact: pass-thru on BODY (json)
JSON is malformed (ie. missing } ]).


Is there any alternative to either disable NXSI Internal rule 15 or somehow to keep the added line on the nginx.conf file ?


Best Regards