Compare commits

..

No commits in common. "1a4fb6246b21c1d9fc16dfcc0aeeba885aa8713b" and "1b8d8705f4eb707f44ac5f7c815603819e1bc4b3" have entirely different histories.

View file

@ -57,7 +57,7 @@ If you're using SVR.JS behind a reverse proxy, you need to configure _trustProxy
Example _easywaf-config.json_ file: Example _easywaf-config.json_ file:
```json ```json
{ {
"modules": { "modules" : {
"xss": { "xss": {
"excludePaths": "/^\\/(?:git\\/)?(?:(?!\\.git).)*\\.git\\/|^\\/(?:(?:navbar-)?logo|powered).png$/" "excludePaths": "/^\\/(?:git\\/)?(?:(?!\\.git).)*\\.git\\/|^\\/(?:(?:navbar-)?logo|powered).png$/"
}, },
@ -109,7 +109,7 @@ It's also recommended to forbid the access to ".env" file and ".git" directories
"nonStandardCodes": [ "nonStandardCodes": [
{ {
"scode": 403, "scode": 403,
"regex": "/^\\/\\.env(?:\\.local|\\.production)?(?:$|[#?])/" "regex": "/^\\/\\.env(?:\\.local)?(?:$|[#?])/"
}, },
{ {
"scode": 403, "scode": 403,