Yes Scott. It is required.

On Wed, Jan 16, 2013 at 6:42 PM, Scott Gerlach <> wrote:
Question about SecStreamOutBodyInspection

Documentation seems to indicate that you do not need SecResponseBodyAccess On but with it turned off debug logs indicate that the rules have nothing to match against.

Is SecResponseBodyAccess required to make SecStreamOutBodyInspection/SecContentInjection work?


Master Java SE, Java EE, Eclipse, Spring, Hibernate, JavaScript, jQuery
and much more. Keep your Java skills current with LearnJavaNow -
200+ hours of step-by-step video tutorials by Java experts.
SALE $49.99 this month only -- learn more at:
mod-security-users mailing list
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: