Re: [mod-security-users] Add Headers with NGinx and ModSecurity

[Christian F. <chr...@ne...>]

On Thu, Sep 17, 2020 at 06:56:26PM +0200, Mikaël Pirio wrote:
> Hello,
> 
> I use libModSecurity 3.0.3 and I would like to know if we can add responses
> headers (with nginx) like we can do with Apache (use `setenv` in rule and
> use this env variable in Apache config) ?

Unfortunately not. NGINX does not even let ModSec inspect the response,
let alone manipulate it. It's an architecture decision with the webserver.

Christian

> 
> Thanks,


> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> http://www.modsecurity.org/projects/commercial/rules/
> http://www.modsecurity.org/projects/commercial/support/