add support for soap+xml

As was talked about by @emphazer in SpiderLabs/owasp-modsecurity-crs#721, RFC 3902 adds support for the application/soap+xml header used by SOAP 1.2.
owasp-modsecurity · Apr 6, 2017 · 5e4e2af · 5e4e2af
1 parent eb798d8
commit 5e4e2af
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modsecurity.conf-recommended b/modsecurity.conf-recommended
@@ -19,7 +19,7 @@ SecRequestBodyAccess On
 # Enable XML request body parser.
 # Initiate XML Processor in case of xml content-type
 #
-SecRule REQUEST_HEADERS:Content-Type "(?:text|application)/xml" \
+SecRule REQUEST_HEADERS:Content-Type "(?:application(?:/soap\+|/)|text/)xml" \
      "id:'200000',phase:1,t:none,t:lowercase,pass,nolog,ctl:requestBodyProcessor=XML"
 
 # Enable JSON request body parser.