REDROOM

Navigation

Breadcrumbs

Create

Preview: modsec2.user.conf Size: 1.49 KB

//etc/apache2/conf.d/modsec/modsec2.user.conf

<IfModule security2_module>
  # Gutenberg REST save/autosave false-positives (posts/pages/blocks only)
  SecRule REQUEST_URI "@rx ^/wp-json/wp/v2/(posts|pages|blocks)/[0-9]+(/autosaves)?(\?.*)?$" \
    "id:100941299,phase:2,pass,nolog,ctl:ruleRemoveById=941100,ctl:ruleRemoveById=941160,ctl:ruleRemoveById=941180,chain"
    SecRule REQUEST_METHOD "@rx ^(POST|PUT)$" "t:none"
</IfModule>

# Gutenberg reusable blocks (wp/v2/blocks) false-positive fix
<IfModule security2_module>
SecRule REQUEST_URI "@rx ^/wp-json/wp/v2/blocks/[0-9]+(/autosaves)?(\?.*)?$" \
  "id:100941302,phase:2,pass,nolog,ctl:ruleRemoveById=941100,ctl:ruleRemoveById=941160,ctl:ruleRemoveById=941180"
</IfModule>




# Gutenberg reusable blocks (wp-json blocks) allowlist: bypass false-positive XSS rules
<IfModule security2_module>
  SecRule REQUEST_URI "@rx ^/wp-json/wp/v2/blocks/[0-9]+(/autosaves)?(\?.*)?$" "id:100941304,phase:1,pass,nolog,ctl:ruleRemoveById=941100,ctl:ruleRemoveById=941130,ctl:ruleRemoveById=941160,ctl:ruleRemoveById=941180,chain"
  SecRule REQUEST_METHOD "@rx ^(POST|PUT)$" "t:none"
</IfModule>


# GeneratePress Elements (gp_elements) editor/autosave allowlist (ModSecurity CRS 9411xx false-positives)
<IfModule security2_module>
  SecRule REQUEST_URI "@rx ^/wp-json/wp/v2/gp_elements/[0-9]+(/autosaves)?(\?.*)?$" \
    "id:100941305,phase:1,pass,nolog,ctl:ruleRemoveById=941100,ctl:ruleRemoveById=941130,ctl:ruleRemoveById=941160,ctl:ruleRemoveById=941180,chain"
    SecRule REQUEST_METHOD "@rx ^(POST|PUT)$" "t:none"
</IfModule>

Name	Size	Perms	Modified	Actions
01-json-api-falsepositive.conf	580 B	lrw-r--r--	2026-02-03 11:51:53	Edit Download recursive recursive
modsec2.cpanel.conf	4.75 KB	lrw-------	2026-02-07 23:07:22	Edit Download recursive recursive
modsec2.cpanel.conf.PREVIOUS	4.75 KB	lrw-------	2026-02-06 23:07:41	Edit Download recursive recursive
modsec2.user.conf	1.49 KB	lrw-r--r--	2026-01-30 19:59:22	Edit Download recursive recursive
modsec2.user.conf.bak.2026-01-28_013952	367 B	lrw-------	2026-01-27 22:36:51	Edit Download recursive recursive
modsec2.user.conf.bak.2026-01-28_014242	555 B	lrw-------	2026-01-27 22:39:59	Edit Download recursive recursive
modsec2.user.conf.bak.2026-01-28_015124	429 B	lrw-------	2026-01-27 22:46:20	Edit Download recursive recursive
modsec2.user.conf.bak.2026-01-28_015743	884 B	lrw-------	2026-01-27 22:53:42	Edit Download recursive recursive
modsec2.user.conf.bak.2026-01-28_020045	760 B	lrw-------	2026-01-27 22:57:50	Edit Download recursive recursive
modsec2.user.conf.bak.2026-01-28_020337	881 B	lrw-------	2026-01-27 23:01:30	Edit Download recursive recursive
modsec2.user.conf.bak.2026-01-28_020340	881 B	lrw-------	2026-01-27 23:01:30	Edit Download recursive recursive
modsec2.user.conf.bak.2026-01-28_020805	699 B	lrw-------	2026-01-27 23:03:47	Edit Download recursive recursive
wp-json-whitelist.conf	276 B	lrw-r--r--	2026-01-28 15:34:29	Edit Download recursive recursive

Directory Contents