From 488d409d8a15bc4e4ff60e4ffdfad4c3f4a450f8 Mon Sep 17 00:00:00 2001 From: Fabian Franz Date: Sun, 14 Oct 2018 12:04:49 +0200 Subject: [PATCH] www/nginx: fix rule 19 issue root cause: even if MainRule is successfully parsed, it is currently not supported. So it must be moved to a basic rule. --- .../src/opnsense/service/templates/OPNsense/Nginx/location.conf | 1 + .../src/opnsense/service/templates/OPNsense/Nginx/ruleset.conf | 1 - 2 files changed, 1 insertion(+), 1 deletion(-) diff --git a/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/location.conf b/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/location.conf index a4173cc8c..a65450f1b 100644 --- a/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/location.conf +++ b/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/location.conf @@ -13,6 +13,7 @@ location {{ location.matchtype }} {{ location.urlpattern }} { LibInjectionXss; CheckRule "$LIBINJECTION_XSS >= {{ location.xss_block_score }}" BLOCK; {% endif %} + BasicRule wl:19; {% set added_policies = [] %} {% if location.custom_policy is defined %} {% for custom_policy_uuid in location.custom_policy.split(',') %} diff --git a/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/ruleset.conf b/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/ruleset.conf index c43533e8f..d08db7a21 100644 --- a/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/ruleset.conf +++ b/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/ruleset.conf @@ -1,4 +1,3 @@ -MainRule wl:19; {% set naxsi_ruletype = 'main' %} {% set main_policies = [] %} {% set main_rules = [] %}