• Hi,

    I have a wordpress site where a waf has been added. The waf blocks all post requests with html type and iframes inside.
    The problem is that I can no longer save an article with the wysiwyg when there is an image or even insert an image in it.
    The error I got is simply “The requested URL was rejected” in AJAX requests and it’s an attempt to xss.

    I may have a solution but clearly I don’t like it. I would have to add an overlay that allows all the images to be shortcode.

    If anyone has already encountered restrictive WAF I would like some information ??

    • This topic was modified 2 years, 11 months ago by Jan Dembowski.
Viewing 4 replies - 1 through 4 (of 4 total)
  • Someone else’s experience doesn’t help you here, I’m afraid.

    Instead, you need to tweak your particular WAF rules (or talk to your particular WAF provider to tweak their rules) to allow the rejected request.

    Thread Starter majth

    (@majth)

    Thanks you George,

    unfortunately i have not heard from them so i try to find another solution ??

    Then perhaps you should begin by mentioning what WAF you’re using ??

    Thread Starter majth

    (@majth)

    Sorry i completely forgot, it’s nginx app protect. But I don’t have control over the configuration.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘New waf blocks the creation of post’ is closed to new replies.