Merge pull request #804 from fgsch/fgsch/issue_801

Apply transformations to the correct rule

Author: csanders-git

rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf

@@ -1054,7 +1054,7 @@ SecRule REQUEST_BASENAME "\.(.*)$" \
   "chain,\
    capture,\
    phase:request,\
-   t:none,t:urlDecodeUni,t:lowercase,\
+   t:none,\
    block,\
    msg:'URL file extension is restricted by policy',\
    severity:'CRITICAL',\
@@ -1074,7 +1074,7 @@ SecRule REQUEST_BASENAME "\.(.*)$" \
    tag:'PCI/6.5.10',\
    setvar:tx.extension=.%{tx.1}/"
      SecRule TX:EXTENSION "@within %{tx.restricted_extensions}" \
-       "t:none,\
+       "t:none,t:urlDecodeUni,t:lowercase,\
         setvar:'tx.msg=%{rule.msg}',\
         setvar:tx.anomaly_score=+%{tx.critical_anomaly_score},\
         setvar:tx.%{rule.id}-OWASP_CRS/POLICY/EXT_RESTRICTED-%{matched_var_name}=%{matched_var}"