fix: XML parser failing (#35)

Only turn on XML parser the content type matches
coreruleset · Sep 20, 2023 · 2d4f3a3 · 2d4f3a3
1 parent 381381f
commit 2d4f3a3
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/plugins/nextcloud-rule-exclusions-before.conf b/plugins/nextcloud-rule-exclusions-before.conf
@@ -165,8 +165,11 @@ SecRule REQUEST_FILENAME "@rx ^/remote\.php/dav/systemtags(?:-relations)?/" \
     t:none,\
     nolog,\
     ver:'nextcloud-rule-exclusions-plugin/1.0.0',\
-    ctl:requestBodyProcessor=XML,\
-    setvar:'tx.allowed_request_content_type=%{tx.allowed_request_content_type} |text/plain|'"
+    chain"
+    SecRule REQUEST_HEADERS:Content-Type "@rx ^text/plain(?:\;charset=UTF-8)?$" \
+        "t:none,\
+        ctl:requestBodyProcessor=XML,\
+        setvar:'tx.allowed_request_content_type=%{tx.allowed_request_content_type} |text/plain|'"
 
 # Allow the data type 'application/octet-stream'
 SecRule REQUEST_METHOD "@pm PUT MOVE" \