mod_sec SCRIPT_BASENAME not working?

[optize]

I have a simple mod_sec rule to block spam.html:

SecRule SCRIPT_BASENAME "spam\.html" "t:none,deny"

This works fine in Apache, however it doesn't trigger on Litespeed.

Is this a known issue?

[webizen]

litespeed skips modsec rules for static file like *.html as it would not cause any real issue. so it is by design not an overlook or bug.

[optize]

Originally Posted by webizen

litespeed skips modsec rules for static file like *.html as it would not cause any real issue. so it is by design not an overlook or bug.

Is there a way to turn it on? I need mod_sec to work on all file types.

[webizen]

use workaround like followings:

<Files ~ "spam.html">
Order allow,deny
Deny from all

Satisfy All
</Files>

<FilesMatch "\.php">
Order allow,deny
Deny from all

Satisfy All
</FilesMatch>