TomCan

Thank you for investigating. I've done some triage and have come to a situation where I can no longer reproduce the problem myself. Both the minimal configuration, as the full...

I managed to reproduce this on another server, and pinned it down to following: In /etc/modsecurity/allowlist_drupal.conf, we had Apache config that uses SecRuleRemoveById to disable a number of rules. If...

I think it's not just user error, but also a bug. In the docs, SecRuleRemoveById is defined as: `SecRuleRemoveById ID ID RANGE ...` If an invalid ID or range has...