-
Notifications
You must be signed in to change notification settings - Fork 29
Open
Description
curl -i "http://127.0.0.1:9180/apisix/admin/routes/" -X PUT -d '
{
"id": "mutiple-test",
"uri": "/*",
"plugins": {
"coraza-filter": {
"conf": {
"directives_map": {
"default": [
"SecDebugLogLevel 9",
"SecRuleEngine On",
"SecRequestBodyAccess On",
"SecRule REQUEST_BODY "@contains eval" "id:43,phase:2,deny,t:lowercase""
]
},
"default_directives": "default"
}
}
},
"upstream": {
"type": "roundrobin",
"nodes": {
"httpbin.org:80": 1
}
}
}'
I established such a rule, and then I used the command "curl -i -X POST "http://127.0.0.1:9080" -d "eval=eval" but it did not trigger the interception.
Metadata
Metadata
Assignees
Labels
No labels