diff --git a/nginx/modsecurity/global-exceptions.conf b/nginx/modsecurity/global-exceptions.conf
index 0df7d32..559d597 100644
--- a/nginx/modsecurity/global-exceptions.conf
+++ b/nginx/modsecurity/global-exceptions.conf
@@ -25,6 +25,13 @@ SecRule REQUEST_URI "@beginsWith /apps/files/api/v1/config/sort_favorites_first"
     nolog, \
     ctl:ruleRemoveById=920420, \
     msg:'TUNING: Falso-positivo de decodificacao (920420) removido para a API de config'"
+SecRule REQUEST_URI "@beginsWith /apps/files/api/v1/config/show_hidden" \
+    "id:1003, \
+    phase:2, \
+    pass, \
+    nolog, \
+    ctl:ruleRemoveById=920350, \
+    msg:'TUNING: Falso-positivo de Host Header (920350) removido para a API de config'"
 # --------------------------------------------------------------------------
 # Exceções para o Zabbix
 # --------------------------------------------------------------------------