diff --git a/nginx/modsecurity/global-exceptions.conf b/nginx/modsecurity/global-exceptions.conf index fff48e5..9408d7d 100644 --- a/nginx/modsecurity/global-exceptions.conf +++ b/nginx/modsecurity/global-exceptions.conf @@ -183,3 +183,10 @@ SecRule REMOTE_ADDR "@ipMatch 172.16.254.1" \ msg:'WHITELIST: [Proxy 172.16.254.1] Desativa WAF para Office Online (WOPI)'" SecRule REQUEST_URI "@beginsWith /index.php/apps/officeonline/wopi/files/" \ "ctl:ruleEngine=Off" +SecRule REQUEST_URI "@streq /apps/officeonline/index" \ + "id:10035, \ + phase:1, \ + pass, \ + nolog, \ + ctl:ruleEngine=Off, \ + msg:'TUNING: Desativa WAF para a pagina de indice do Office Online (falso positivo em GET)'"