Ensure the LimitRequestFields Directive is Set to 100 or Less Details The LimitRequestFields directive limits the number of fields allowed in an HTTP request. Rationale: The limiting of the number...
Ensure the LimitRequestFieldsize Directive is Set to 1024 or Less Details The LimitRequestFieldSize limits the number of bytes that will be allowed in an HTTP request header. It is recommended...
Ensure the OWASP ModSecurity Core Rule Set Is Installed and Enabled – Active Rules Details The OWASP ModSecurity Core Rules Set (CRS) is a set of open source web application defensive rules for the...
Ensure the OWASP ModSecurity Core Rule Set Is Installed and Enabled – Inbound Anomaly Threshold Details The OWASP ModSecurity Core Rules Set (CRS) is a set of open source web application defensive rules for the...
Ensure the OWASP ModSecurity Core Rule Set Is Installed and Enabled – Outbound Anomaly Threshold Details The OWASP ModSecurity Core Rules Set (CRS) is a set of open source web application defensive rules for the...
Ensure the OWASP ModSecurity Core Rule Set Is Installed and Enabled – Paranoia Level Details The OWASP ModSecurity Core Rules Set (CRS) is a set of open source web application defensive rules for the...