<div>
The links do not give any answer to the specific thing I asked, so it not helpful to accept as a right answer.<br />
It won't help anyone that would read this post.<br />
<br />
But, you are the Site Admin and you decide :)<br />
<br />

</div>


The links do not give any answer to the specific thing I asked, so it not helpful to accept as a right answer.
It won't help anyone that would read this post.

But, you are the Site Admin and you decide :)



<div>
<div class="content wysiwyg-content">
we have enabled mod_security and prevented a lots of XSS attacks.<br />
the problem is that some of the clients couldn work with they cms or forums cause the xss rules denied the access to many functions of the forums/cms's.<br />
<br />
I had to disable these rules from mod_security but now i have problems iwth XSS attacks again.<br />
<br />
As I understand there must be a way not to disable the rules from apache but just for a particular site's vhost, by using .htaccess or some include?<br />
<br />
anyone has idea how to do that?<br />
<br />
the rules I want to disable ONLY for these particular vhosts are these:<br />
<br />
&nbsp;SecFilter &quot;&lt;( |\n)*script&quot;<br />
&nbsp;SecFilter &quot;&lt;(.|\n)+&gt;&quot;
</div>
</div>


we have enabled mod_security and prevented a lots of XSS attacks.
the problem is that some of the clients couldn work with they cms or forums cause the xss rules denied the access to many functions of the forums/cms's.

I had to disable these rules from mod_security but now i have problems iwth XSS attacks again.

As I understand there must be a way not to disable the rules from apache but just for a particular site's vhost, by using .htaccess or some include?

anyone has idea how to do that?

the rules I want to disable ONLY for these particular vhosts are these:

 SecFilter "<( |\n)*script"
 SecFilter "<(.|\n)+>"

mod_security question

The Apache HTTP Server is a secure, efficient and extensible server that provides HTTP services in sync with the current HTTP standards. Typically Apache is run on a Unix-like operating system, but it is available for a wide variety of operating systems, including Linux, Novell NetWare, Mac OS-X and Windows. Released under the Apache License, Apache is open-source software.