diff --git a/plugins/wordpress-rule-exclusions-before.conf b/plugins/wordpress-rule-exclusions-before.conf index 6c0a499..bb2881d 100644 --- a/plugins/wordpress-rule-exclusions-before.conf +++ b/plugins/wordpress-rule-exclusions-before.conf @@ -46,7 +46,10 @@ SecRule REQUEST_FILENAME "@rx /wp-(?:login|admin/admin-ajax)\.php$" \ nolog,\ ctl:ruleRemoveTargetById=920230;ARGS:redirect_to,\ ctl:ruleRemoveTargetById=920273;ARGS:redirect_to,\ + ctl:ruleRemoveTargetById=932235;ARGS:redirect_to,\ + ctl:ruleRemoveTargetById=932236;ARGS:redirect_to,\ ctl:ruleRemoveTargetById=931130;ARGS:redirect_to,\ + ctl:ruleRemoveTargetById=942120;ARGS:redirect_to,\ ctl:ruleRemoveTargetById=942430;ARGS:redirect_to,\ ctl:ruleRemoveTargetById=942431;ARGS:redirect_to,\ ctl:ruleRemoveTargetById=942432;ARGS:redirect_to,\ diff --git a/tests/regression/wordpress-rule-exclusions-plugin/9507100.yaml b/tests/regression/wordpress-rule-exclusions-plugin/9507100.yaml index 1e60636..f6bf4f8 100644 --- a/tests/regression/wordpress-rule-exclusions-plugin/9507100.yaml +++ b/tests/regression/wordpress-rule-exclusions-plugin/9507100.yaml @@ -97,3 +97,22 @@ tests: output: log: expect_ids: [932160] + - test_id: 4 + desc: False positive with '=post&' + stages: + - input: + dest_addr: 127.0.0.1 + headers: + Host: localhost + User-Agent: OWASP CRS test agent + Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5 + port: 80 + method: GET + version: "HTTP/1.1" + uri: /get/wp-login.php?redirect_to=https%3A%2F%2Flocalhost%2Fwp-admin%2Fedit.php%3Fs%26post_status%3Dall%26post_type%3Dpost%26action%3D-1%26m%3D0%26cat%3D1%26post_format%26seo-filter%26filter_action%3DFiltrova%25C5%25A5%26paged%3D1%26action2%3D-1 + output: + log: + no_expect_ids: + - 932235 + - 932236 + - 942120