[Auto-Sync] Atualização das configurações em srvproxy001.itguys.com.br - 2025-10-03 09:21:01

nginx/modsecurity/global-exceptions.conf

@@ -12,26 +12,11 @@ SecRule REQUEST_URI "@beginsWith /remote.php" "id:10001,phase:1,nolog,pass,ctl:r
 SecRule REQUEST_URI "@streq /.well-known/caldav" "id:10002,phase:1,nolog,pass,ctl:ruleEngine=Off"
 SecRule REQUEST_URI "@streq /.well-known/carddav" "id:10003,phase:1,nolog,pass,ctl:ruleEngine=Off"
 SecRule REQUEST_URI "@beginsWith /ocs/v2.php/apps/user_status/api/v1/heartbeat" \
-    "id:1001, \
+    "id:1001,phase:2,pass,nolog,ctl:ruleRemoveById=942100,msg:'TUNING: Falso-positivo de SQLi (942100) removido para a API de heartbeat'"
-    phase:2, \
-    pass, \
-    nolog, \
-    ctl:ruleRemoveById=942100, \
-    msg:'TUNING: Falso-positivo de SQLi (942100) removido para a API de heartbeat'"
 SecRule REQUEST_URI "@beginsWith /apps/files/api/v1/config/sort_favorites_first" \
-    "id:1002, \
+    "id:1002,phase:2,pass,nolog,ctl:ruleRemoveById=920420,msg:'TUNING: Falso-positivo de decodificacao (920420) removido para a API de config'"
-    phase:2, \
-    pass, \
-    nolog, \
-    ctl:ruleRemoveById=920420, \
-    msg:'TUNING: Falso-positivo de decodificacao (920420) removido para a API de config'"
 SecRule REQUEST_URI "@beginsWith /apps/files/api/v1/config/show_hidden" \
-    "id:1003, \
+    "id:1003,phase:2,pass,nolog,ctl:ruleRemoveById=920350,msg:'TUNING: Falso-positivo de Host Header (920350) removido para a API de config'"
-    phase:2, \
-    pass, \
-    nolog, \
-    ctl:ruleRemoveById=920350, \
-    msg:'TUNING: Falso-positivo de Host Header (920350) removido para a API de config'"
 # --------------------------------------------------------------------------
 # Exceções para o Zabbix
 # --------------------------------------------------------------------------