Chris For some reason, rule 900012 (where you set the tx.allowed_methods) was moved to phase:2, and therefore is executing after rule 960032. By moving back rule 900012 to phase:1, you should get it working properly.
Regards Benjamin F
_______________________________________________ Owasp-modsecurity-core-rule-set mailing list Owasp-modsecurity-core-rule-set@lists.owasp.org https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set