Supprime des règles owasp crs pour metabase (#195)

* chore: suppression de règles owasp crs pour metabase * chore: mise à jour de metabase vers 0.46.2
mission-apprentissage · May 16, 2023 · cae94b1 · cae94b1
1 parent d90c272
commit cae94b1
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -61,7 +61,7 @@ services:
       - trajectoires_pro_network
 
   metabase:
-    image: metabase/metabase:v0.46.0
+    image: metabase/metabase:v0.46.2
     container_name: trajectoires_pro_metabase
     mem_limit: 2g
     depends_on:

diff --git a/reverse_proxy/app/nginx/owasp-crs/rules/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf b/reverse_proxy/app/nginx/owasp-crs/rules/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf
@@ -170,4 +170,11 @@ SecRule REQUEST_FILENAME "@beginsWith /metabase" \
     phase:2,\
     pass,\
     nolog,\
-    ctl:ruleRemoveById=941000-942999"
+    ctl:ruleRemoveById=941000-942999"
+
+SecRule REQUEST_FILENAME "@beginsWith /metabase" \
+    "id:1005,\
+    phase:1,\
+    pass,\
+    nolog,\
+    ctl:ruleRemoveById=200002-200007"