add additional bypass rules

ministryofjustice · Nov 12, 2024 · 7e3e061 · 7e3e061
1 parent f3836ca
commit 7e3e061
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/helm_deploy/values-base.yaml b/helm_deploy/values-base.yaml
@@ -90,6 +90,9 @@ datahub-frontend:
       nginx.ingress.kubernetes.io/modsecurity-snippet: |
         SecRuleEngine On
         SecRule REQUEST_URI "@beginsWith /api/v2/graphql" "id:1005,phase:2,t:none,ctl:ruleRemoveById=932150;ARGS:json.query"
+        SecRule REQUEST_URI "@beginsWith /api/v2/graphql" "id:1005,phase:2,t:none,ctl:ruleRemoveById=932115;ARGS:json.query"
+        SecRule REQUEST_URI "@beginsWith /api/v2/graphql" "id:1005,phase:2,t:none,ctl:ruleRemoveById=941180;ARGS:json.query"
+        SecRule REQUEST_URI "@beginsWith /api/v2/graphql" "id:1005,phase:2,t:none,ctl:ruleRemoveById=949110;ARGS:json.query"
         SecDefaultAction "phase:2,pass,log,tag:github_team=data-catalogue"
         SecDefaultAction "phase:4,pass,log,tag:github_team=data-catalogue"
     tls: