Re: [mod-security-users] Creating A rule for Search's

[Leen B. <le...@wi...>]

> 1.- block all HTTP SEARCH requests: SecFilter "SEARCH "
> 2.- block all requests over an specific size (for example, over 100 
> characters any of the header lines): SecFilterSelective HTTP_Header 
> "^.{100,}$"
> 
> I believe the above examples are correct, but I have not tested them 
> myself.

From the top of my head, 256 is the limit in the specs, so I would limit
it to 256, not a 100