annotation to ignore given list of WAF rulesets (#2314)

2018-04-08 21:55:23 -04:00 · 2018-04-08 21:55:23 -04:00 · 16faf309ca
commit 16faf309ca
parent a6fe800a47
6 changed files with 59 additions and 9 deletions
--- a/rootfs/etc/nginx/template/nginx.tmpl
+++ b/rootfs/etc/nginx/template/nginx.tmpl
@ -835,6 +835,10 @@ stream {
                waf:set_option("res_tid_header", true)
                {{ end }}

+                {{ range $ruleset := $location.LuaRestyWAF.IgnoredRuleSets }}
+                waf:set_option("ignore_ruleset", "{{ $ruleset }}")
+                {{ end }}
+
                waf:exec()
            }
            header_filter_by_lua_block {