search

nbs-system / naxsi

NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
GNU General Public License v3.0
4.8k stars 606 forks source link

BasicRule wl:0 "mz:$BODY_VAR:channelid"; Why not manifest #485

Closed linkimfly closed 11 months ago

linkimfly commented 4 years ago

BasicRule

BasicRule wl:0 "mz:$BODY_VAR:channelid";

Set the post name equal to channelid, pass all the rules but it has no effect, it is still blocked

BasicRule

BasicRule wl:0 "mz:$URL_X:(^.*?article_edit.*$)|URL";

Similarly, I match a certain URL and then pass all the rules. Does not take effect

What is the correct rule?

linkimfly commented 4 years ago

@buixor Ask God to help me

linkimfly commented 4 years ago

My environment： Centos6.9 Nginx 1.16.1

buixor commented 4 years ago

BasicRule wl:0 "mz:$BODY_VAR:channelid"; It will whitelist rules, but only in the channelId post variable, is it what you meant ?

linkimfly commented 4 years ago

Yes, there is a parameter name = channelid in my post request, I want to let Naxsi pass and not intercept requests with parameter name = channelid