Firas Durri

Yeah the license is a bit awkward. I didn’t worry about forking it since the example code is so minimal, but let’s see if upstream has any response…

Looks like 900200 was already enabled And yeah WORDPRESS-EXCLUSION-RULES.conf is enabled I don't have direct shell/command line access so not able to examine crs-setup.conf.. will see if possible to access...

I'd just like to underscore that PUT is a method used by WP-JSON (which is the URL for the WP API) in general. So blocking all HTTP PUT requests (as...

Looks like they're always prefixed with` /wp-json/`, or (if rewriting URLs is not available) the query string `?rest_route ` eg. http://example.com/wp-json/wp/v2/posts/123 http://example.com/?rest_route=/wp/v2/posts/123 Some docs: https://developer.wordpress.org/rest-api/extending-the-rest-api/routes-and-endpoints/

Interesting segment in that link about the HTTP methods > HTTP methods are sometimes referred to as HTTP verbs. They are simply just different ways to communicate via HTTP. The...

Yeah a regex that matches the /wp-json/ endpoint makes sense.

That works, thank you!