Hi there, The blog post http://blog.spiderlabs.com/2011/08/modsecurity-advanced-topic-of-the-week-exception-handling.html has been updated for changes in the rule engine. So I think it is still the reference on the handling of false positives.
In the section on Anomaly Scoring Exceptions, the inbound anomaly score is being referenced as tx.anomaly_score, while the core rules reference it as tx.inbound_anomaly_score. I think this should be fixed. Cheers, Christian -- If you have men who will only come if they know there is a good road, I don't want them. I want men who will come if there is no road at all. -- David Livingstone _______________________________________________ Owasp-modsecurity-core-rule-set mailing list Owasp-modsecurity-core-rule-set@lists.owasp.org https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set