docs: document use of @unconditionalMatch instead of SecAction (#31)

coreruleset · Feb 16, 2024 · a9376fd · a9376fd
1 parent 47ad545
commit a9376fd
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/plugins/wordpress-rule-exclusions-before.conf b/plugins/wordpress-rule-exclusions-before.conf
@@ -503,6 +503,8 @@ SecRule REQUEST_FILENAME "@endsWith /wp-admin/user-new.php" \
 # [ General exclusions ]
 #
 
+# Operator @unconditionalMatch is used instead of a SecAction because of a bug
+# in ModSecurity v3 which prevents SecActions to be removed using ctl action.
 # _wp_http_referer and wp_http_referer are passed on a lot of wp-admin pages
 SecRule REQUEST_FILENAME "@unconditionalMatch" \
     "id:9507600,\