appsec-bot-challenge-exclude-static
WAF configuration
- Version
- 0.3
Install with a top-level collection
3 collections include itsudo cscli collections install crowdsecurity/appsec-bot-challengeInstalls 2 parsers and 2 scenarios, via WAF - Bot Challenge Path Exclusions.
View WAF - Bot Challenge →Installation
sudo cscli appsec-configs install crowdsecurity/appsec-bot-challenge-exclude-staticThen reload CrowdSec: sudo systemctl reload crowdsec
Sign in to see which of your engines run it →Configuration
name: crowdsecurity/appsec-bot-challenge-exclude-static# Let static assets and browser metadata files fly through without a challenge# Do not edit this file to add your own exclusions, create a custom config.inband:pre_eval:- filter: >-req.URL.Path matches '\\.(css|js|mjs|map|png|jpe?g|gif|svg|webp|avif|ico|bmp|woff2?|ttf|otf|eot|mp4|m4v|webm|mov|mp3|m4a|wav|ogg|oga|ogv|flac|aac|webmanifest)$' ||req.URL.Path in ['/manifest.json', '/browserconfig.xml']apply:- ExemptFromChallenge("static")
Installed on
Know where it runs
Sign in to see the Security Engines that run this waf configuration, the version they run and whether it was modified locally.