diff --git a/nginx/modsecurity/global-exceptions.conf b/nginx/modsecurity/global-exceptions.conf index da41b2d..bd76f35 100644 --- a/nginx/modsecurity/global-exceptions.conf +++ b/nginx/modsecurity/global-exceptions.conf @@ -64,6 +64,7 @@ SecRule REQUEST_URI "@beginsWith /index.php/core/preview" "id:10010,phase:1,nolo # Office Online, que geram muitos falsos positivos. # As rotas são /hosting/discovery, /hosting/wopi/ e /op/. SecRule REQUEST_URI "@rx ^/(hosting|op|we|wv|p|x|lo|m|o)/" "id:10014,phase:1,nolog,pass,ctl:ruleEngine=Off" +SecRule REQUEST_URI "@streq /index.php/apps/officeonline/ajax/admin.php" "id:10015,phase:1,nolog,pass,ctl:ruleEngine=Off" # Exceções para a API do UniFi Controller # --------------------------------------------------------------------------