多部分 C-T 头验证 - 假阳性 (规则 ID 200002, 多个边界参数)
{ "transaction": { "client_ip": "172.20.0.3", "time_stamp": "Thu Aug 13 12:28:02 2026", "server_id": "690747073f28ae5f84cfa8357f016284f53e90a0", "client_port": 40504, "host_ip": "172.20.0.5", "host_port": 8080, "unique_id": "178661688211.798485", "is_interrupted": true, "request": { "method": "POST", "http_version": "1.1", "hostname": "upstream-crs", "uri": "/api", "headers": { "accept-encoding": "gzip, deflate, br, zstd", "accept-language": "de-DE", "Content-Length": "480", "Host": "upstream-crs", "Accept": "application/json", "X-Forwarded-Host": "localhost:8080", "origin": "http://localhost:5173", "X-Forwarded-For": "172.20.0.1", "X-Forwarded-Proto": "http", "sec-fetch-site": "same-origin", "user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0", "Connection": "upgrade", "sec-fetch-mode": "cors", "Content-Type": "multipart/form-data;boundary=----geckoformboundary4a7acee3709293e183ef2932a147a331;charset=UTF-8", "referer": …
内容来源: owasp-modsecurity/ModSecurity