Updated recommended conf to enter XML processor when content-type is application/xml

Chaim Sanders · Chaim Sanders · commit 1068da464c4f · 2016-01-11T10:43:05.000-05:00
diff --git a/modsecurity.conf-recommended b/modsecurity.conf-recommended
@@ -19,7 +19,7 @@ SecRequestBodyAccess On
 # Enable XML request body parser.
 # Initiate XML Processor in case of xml content-type
 #
-SecRule REQUEST_HEADERS:Content-Type "text/xml" \
+SecRule REQUEST_HEADERS:Content-Type "(?:text|application)/xml" \
      "id:'200000',phase:1,t:none,t:lowercase,pass,nolog,ctl:requestBodyProcessor=XML"
 
 # Enable JSON request body parser.

Original file line number	Diff line number	Diff line change
`@@ -19,7 +19,7 @@ SecRequestBodyAccess On`
`19`	`19`	`# Enable XML request body parser.`
`20`	`20`	`# Initiate XML Processor in case of xml content-type`
`21`	`21`	`#`
`22`		`-SecRule REQUEST_HEADERS:Content-Type "text/xml" \`
	`22`	`+SecRule REQUEST_HEADERS:Content-Type "(?:text\|application)/xml" \`
`23`	`23`	`"id:'200000',phase:1,t:none,t:lowercase,pass,nolog,ctl:requestBodyProcessor=XML"`
`24`	`24`
`25`	`25`	`# Enable JSON request body parser.`