View Single Post
  #5  
Old 12-12-2011, 07:29 AM
justme justme is offline
Member
 
Join Date: Feb 2008
Posts: 35
I need to confirm but it looks like it is working with the recommended build. Thanks, at last
Yes, it is OK!
I had to disable the following filter to get rid of 403 errors since the upgrade:
SecFilterSelective ARGS "(alert|expression|eval|url)[[:space:]]*\("
SecFilterSelective ARGS "(&\{.+\}|(&#[[0-9a-fA-F]]|\x5cx[0-9a-fA-F]){2})"

SecFilterSelective ARGS "((javascript|vbscript):|style[[:space:]]*=)"
SecFilterSelective ARGS "(fromCharCode|http-equiv|<.+>|innerHTML|dynsrc|-->)"
SecFilterSelective ARGS "document\.(body|cookie|location|write)"

SecFilterSelective ARGS_VALUES "jsessionid|phpsessid|onReadyStateChange|xmlHt tp"

SecFilterSelective ARGS "<(applet|div|embed|iframe|img|meta|object|script| textarea)"

# JavaScript event handlers
SecFilterSelective ARGS "on(Abort|Blur|Click|DblClick|DragDrop|Error|Focus |KeyUp|KeyDown|KeyPrerss|Load|Mouse(Down|Out|Over| Up)|Move|Reset|Resize|Select|Submit|Unload)"

Last edited by justme; 12-12-2011 at 09:30 AM..
Reply With Quote