Control Web Panel

Security => Mod_Security => Topic started by: borkoloco on May 23, 2025, 01:06:10 PM

Title: 403 error
Post by: borkoloco on May 23, 2025, 01:06:10 PM

Hey guys,
I am trying to make a react application with node express backend work. I copied the backend on the root and the build on the public_html...installed everything. The application works....but I am getting delete and update requests blocked, not get and post. I get 403 error and in the mod sec console i found errors comingo from there...i disabled mod sec i think.but the  403 keeps coming out!

Any advice or suggestions? I can send screens if needed of anything.

Thanks in advance

Title: Re: 403 error
Post by: overseer on May 25, 2025, 01:40:38 AM

Consider updating to ModSecurity 2.9.8 and the current OWASP ruleset -- might reduce some false positives:
https://starburst.help/category/control-web-panel-cwp/modsecurity-running-wit-control-web-panel/ (https://starburst.help/category/control-web-panel-cwp/modsecurity-running-wit-control-web-panel/)

Title: Re: 403 error
Post by: Starburst on May 25, 2025, 08:47:06 AM

@overseer thank for find that weird type-o in the URL.

Fixed it:

https://starburst.help/category/control-web-panel-cwp/modsecurity-running-with-control-web-panel/ (https://starburst.help/category/control-web-panel-cwp/modsecurity-running-with-control-web-panel/)

Title: Re: 403 error
Post by: Starburst on May 25, 2025, 08:48:41 AM

Quote from: borkoloco on May 23, 2025, 01:06:10 PM

Hey guys,
I am trying to make a react application with node express backend work. I copied the backend on the root and the build on the public_html...installed everything. The application works....but I am getting delete and update requests blocked, not get and post. I get 403 error and in the mod sec console i found errors comingo from there...i disabled mod sec i think.but the  403 keeps coming out!

Any advice or suggestions? I can send screens if needed of anything.

Thanks in advance

Check your ModSecurity Log, and see what ruleset & rule is being triggered.

You then can exempt that rule for your application to run.