This plugin contains rule exclusions for CiviCRM, a PHP-based CRM for nonprofit and civic sector organizations. These rule exclusions are designed to resolve common false positives and allow for easier integration with the OWASP ModSecurity Core Rule Set (CRS).
For full and up to date instructions for the different available plugin installation methods, refer to How to Install a Plugin in the official CRS documentation.
After the plugin is enabled, CiviCRM should work without problems caused by CRS (for example, false positives while blocking requests). If problems still occur then please file a new issue on GitHub. (Note that high paranoia level deployments may require additional tuning beyond this plugin.)
Copyright (c) 2022 OWASP ModSecurity Core Rule Set project. All rights reserved. Copyright (c) 2023 Jonathan Goldberg. No rights reserved.
The OWASP ModSecurity Core Rule Set and its official plugins are distributed under Apache Software License (ASL) version 2. Please see the enclosed LICENSE file for full details.