Remove modsec rule 933210 due to false positives with markdown (#1249)

ministryofjustice · Oct 30, 2024 · 3a81f2d · 3a81f2d
1 parent 6abd828
commit 3a81f2d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/helm_deploy/cla-backend/templates/ingress_v122.yaml b/helm_deploy/cla-backend/templates/ingress_v122.yaml
@@ -25,6 +25,9 @@ metadata:
       SecRuleEngine On
       SecDefaultAction "phase:2,pass,log,tag:github_team=laa-get-access"
       SecRule REQUEST_METHOD "DELETE" "phase:1,id:1000,nolog,allow"
+      # This rule is triggering false positives when trying to save guidance notes that contain markdown.
+      # See LGA-3333 for more details.
+      SecRuleRemoveById 933210
 spec:
   ingressClassName: "modsec"
   tls: