Solved

mod_security question

Posted on 2006-06-16
4
231 Views
Last Modified: 2010-03-04
we have enabled mod_security and prevented a lots of XSS attacks.
the problem is that some of the clients couldn work with they cms or forums cause the xss rules denied the access to many functions of the forums/cms's.

I had to disable these rules from mod_security but now i have problems iwth XSS attacks again.

As I understand there must be a way not to disable the rules from apache but just for a particular site's vhost, by using .htaccess or some include?

anyone has idea how to do that?

the rules I want to disable ONLY for these particular vhosts are these:

 SecFilter "<( |\n)*script"
 SecFilter "<(.|\n)+>"
0
Comment
Question by:MaRiOsGR
4 Comments
 
LVL 23

Accepted Solution

by:
rama_krishna580 earned 500 total points
ID: 16972377
0
 
LVL 2

Author Comment

by:MaRiOsGR
ID: 17175091
The links do not give any answer to the specific thing I asked, so it not helpful to accept as a right answer.
It won't help anyone that would read this post.

But, you are the Site Admin and you decide :)

0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Introduction As you’re probably aware the HTTP protocol offers basic / weak authentication, which in combination with the relevant configuration on your web server, provides the ability to password protect all or part of your host.  If you were not…
If your site has a few sections that need to be secure when data is transmitted between the server and local computer, such as a /order/ section for ordering or /customer/ which contains customer data, etc it would of course be recommended to secure…
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now