feat: Add rule to edit the CRS-v3 default allowed_http_versions to add HTTP/3 and HTTP3.0 in ModSecurity when using HTTP3

This commit is contained in:
Théophile Diot 2024-05-27 12:07:41 +01:00
parent 758221c93c
commit 32d9be885f
No known key found for this signature in database
GPG key ID: 248FEA4BAE400D06

View file

@ -0,0 +1,9 @@
{% if USE_MODSECURITY == "yes" and MODSECURITY_CRS_VERSION == "3" and HTTP3 == "yes" +%}
SecAction \
"id:900230,\
phase:1,\
nolog,\
pass,\
t:none,\
setvar:'tx.allowed_http_versions=HTTP/1.0 HTTP/1.1 HTTP/2 HTTP/2.0 HTTP/3 HTTP/3.0'"
{% endif %}