Bläddra i källkod

MSOCI-2059 disable GenericLFI_BODY for JIRA

should be v3.5.15
Duane Waddle 3 år sedan
förälder
incheckning
97968a4d4e
1 ändrade filer med 2 tillägg och 1 borttagningar
  1. 2 1
      base/jira/instance_jira/waf.tf

+ 2 - 1
base/jira/instance_jira/waf.tf

@@ -23,7 +23,8 @@ module "waf" {
 
   excluded_rules_AWSManagedRulesCommonRuleSet = [
     "SizeRestrictions_BODY",
-    "CrossSiteScripting_BODY"
+    "CrossSiteScripting_BODY",
+    "GenericLFI_BODY"             # JIRA EditFilter.jspa throws this when updating a filter
   ]
 
   # These are passed through and should be the same for module