Merge pull request #410 from mdr-engineering/feature/bp_MSOCI-2121_disable_waf_rule

Disables additional WAF Rule

base/customer_portal/waf.tf

@@ -11,6 +11,7 @@ module "waf" {
   excluded_rules_AWSManagedRulesCommonRuleSet = [
     "SizeRestrictions_BODY",
     "GenericRFI_BODY",             # Blocks portal lambda MSOCI-2060
+    "CrossSiteScripting_BODY",     # Blocks portal API MSOCI-2121
   ]
 
   # These are passed through and should be the same for module