coreruleset / wordpress-rule-exclusions-plugin

Rule exclusion plugin for WordPress.
Apache License 2.0
13 stars 7 forks source link

fix: exclude json.styles from SQL injection detection #18

Closed theseion closed 1 year ago

theseion commented 1 year ago

The full site editor (Gutenberg) sends style information in a JSON document. CSS style switches are detected by libinjection as SQL comments.

This commit create a new rule (and associated test) that removes the json.styles argument from detection by rule 942100.

Fixes #16