瀏覽代碼

Merge pull request #374 from mdr-engineering/bugfix/dw_MSOCI-2059_changejirawafrules

MSOCI-2059 disable GenericLFI_BODY for JIRA
Duane Waddle 3 年之前
父節點
當前提交
31ca1916fa
共有 1 個文件被更改,包括 2 次插入1 次删除
  1. 2 1
      base/jira/instance_jira/waf.tf

+ 2 - 1
base/jira/instance_jira/waf.tf

@@ -23,7 +23,8 @@ module "waf" {
 
   excluded_rules_AWSManagedRulesCommonRuleSet = [
     "SizeRestrictions_BODY",
-    "CrossSiteScripting_BODY"
+    "CrossSiteScripting_BODY",
+    "GenericLFI_BODY"             # JIRA EditFilter.jspa throws this when updating a filter
   ]
 
   # These are passed through and should be the same for module