[mod-security-users] Sanitize JSON Request / Response

[Cristiano G. <cri...@ga...>]

Hello!

I created a rule in ModSecurity to sanitize param CVV (credit card) but it is not working.

Samples:
SecAction "nolog,phase:2,id:101,sanitiseArg:CVV”
SecAction "nolog,phase:4,id:102,sanitiseArg:CVV_Reponse"

This prevents me from using modsecurity because PCI does not allow CVV to be stored.

I found this issue without response.
https://github.com/SpiderLabs/ModSecurity/issues/715

What can I do?

Cristiano Galdino
cri...@ga...