Update wordpress-rule-exclusions-before.conf (#38)

coreruleset · Apr 5, 2024 · 9994e7a · 9994e7a
1 parent db1535c
commit 9994e7a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/plugins/wordpress-rule-exclusions-before.conf b/plugins/wordpress-rule-exclusions-before.conf
@@ -115,7 +115,7 @@ SecRule REQUEST_FILENAME "@endsWith /wp-admin/comment.php" \
 #
 
 # Gutenberg
-SecRule REQUEST_FILENAME "@rx /wp-json/wp/v[0-9]+/(?:posts|pages)" \
+SecRule REQUEST_FILENAME "@rx /wp-json/wp/v[0-9]+/(?:posts|pages|templates)" \
     "id:9507140,\
     phase:1,\
     pass,\
@@ -215,7 +215,7 @@ SecRule REQUEST_FILENAME "@endsWith /index.php" \
 
 # Cannot update page|post in WordPress due to `x-http-method-override` header.
 # This rule is a copy of rule 900250 and must be synchronised with that rule.
-SecRule REQUEST_FILENAME "@rx /wp-json/wp/v[0-9]+/(?:posts|pages|users)" \
+SecRule REQUEST_FILENAME "@rx /wp-json/wp/v[0-9]+/(?:posts|pages|users|templates)" \
     "id:9507146,\
     phase:1,\
     pass,\