white list rule

[dcalixto]

Instead of the white list the session for tommy i would like to white list for all users, below a code example. BasicRule wl:1000 "mz:$URL:/sessions/tommy|$BODY_VAR:_method";

So, how can i white list the session for all users?

[snottycrustacean]

You should use $URL_X:regexp

[aarvee11]

PCRE Regex works. So generate a regex for all your usernames. http://regexr.com/ is your friend

[dcalixto]

so, should be? BasicRule wl:1000 "mz:$URL_X:regexp:/|$BODY_VAR:_method";

[buixor]

Hello,

if you use regex-style expression, the whole match-zone must be in regex, see : https://github.com/nbs-system/naxsi/wiki/matchzones-bnf

[dcalixto]

Hello @buixor so that's is the properly way? BasicRule wl:1000 "mz:$URL_X:regexp:/|$BODY_VAR:regex:_method";

[buixor]

Hello,

BasicRule wl:1000 "mz:$URL_X:regexp:/|$BODY_VAR_X:regex";

Would be the way :)