https://github.com/zone-eu/waf-handler
Simple handler for ModSecurity false-positives
https://github.com/zone-eu/waf-handler
Last synced: 8 months ago
JSON representation
Simple handler for ModSecurity false-positives
- Host: GitHub
- URL: https://github.com/zone-eu/waf-handler
- Owner: zone-eu
- Created: 2019-08-21T12:54:21.000Z (almost 7 years ago)
- Default Branch: master
- Last Pushed: 2019-08-21T13:14:34.000Z (almost 7 years ago)
- Last Synced: 2025-07-23T23:35:30.552Z (11 months ago)
- Language: PHP
- Size: 2.93 KB
- Stars: 0
- Watchers: 3
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# WAF-handler
Custom Apache error page with ModSecurity + OWASP CRS false-positive reporting to email and/or Slack.
**Note:** This is not production-ready, as there is currently no rate-limiting and single unique-id can be used to spam target mailbox / slack channel.
## Installation and configuration
* copy `index.php` to `/waf-handler/index.php` under your docroot
* specify custom ErrorDocument in Apache configuration:
`ErrorDocument 403 /waf-handler/index.php?email=monitoring@example.com&slack=https://hooks.slack.com/services/T12...3T/B12...3B/hU12...3Uh`