Browse Source

only ignore rules without a message

Sebastien Blot 1 year ago
parent
commit
bdc62d3715
1 changed files with 1 additions and 1 deletions
  1. 1 1
      pkg/acquisition/modules/appsec/utils.go

+ 1 - 1
pkg/acquisition/modules/appsec/utils.go

@@ -273,7 +273,7 @@ func (r *AppsecRunner) AccumulateTxToEvent(evt *types.Event, req *appsec.ParsedR
 	})
 
 	for _, rule := range req.Tx.MatchedRules() {
-		if rule.Message() == "" || rule.DisruptiveAction() == "pass" || rule.DisruptiveAction() == "allow" {
+		if rule.Message() == "" {
 			r.logger.Tracef("discarding rule %d (action: %s)", rule.Rule().ID(), rule.DisruptiveAction())
 			continue
 		}