ModSecurity and additional rules
I have noticed that mode security detects MSSQL code execution and looking for basic SQL injection.
If I confirm rule, how I know this will not prevent web application to work like cookies or it will happen any usability issue?
-
You probably wont know for sure until you test the rule. 0 -
Hello, Which particular Mod_Security ruleset are you using? You can sometimes search for the rule ID in a search engine to see if others have faced issues with false positives from the same rule ID. Thank you. 0
Please sign in to leave a comment.
Comments
2 comments