SDIT-2319: 🐛 Allow multiple filter params in mod security (#65)

ministryofjustice · Dec 30, 2024 · c024a54 · c024a54
1 parent eb8479d
commit c024a54
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/helm_deploy/hmpps-historical-prisoner/values.yaml b/helm_deploy/hmpps-historical-prisoner/values.yaml
@@ -25,6 +25,7 @@ generic-service:
       SecRuleRemoveById 920272
       # Allow multiple parameters of the same name to be passed through for HTTP Parameter Pollution
       SecRuleUpdateTargetById 921180 "!TX:paramcounter_ARGS_NAMES:section"
+      SecRuleUpdateTargetById 921180 "!TX:paramcounter_ARGS_NAMES:filters"
       # Allow 1c in request cookie and csrf for SQL Injection Attack Detected via libinjection
       SecRuleUpdateTargetById 942100 "!ARGS:_csrf"
       SecRuleUpdateTargetById 942100 "!REQUEST_COOKIES:/connect.sid/"