bypass admin post requests

PHOENIX-MEDIA · Dec 5, 2024 · 092f499 · 092f499
1 parent 62756f7
commit 092f499
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/values_waf.yaml b/values_waf.yaml
@@ -112,6 +112,11 @@ varnish:
       #        return (pass);
       #    }
 
+          # bypass WAF
+          if (req.http.cookie ~ "admin=" && req.method == "POST") {
+              set req.backend_hint = magento_director.backend("magento-headless");
+          }
+
           # We only deal with GET and HEAD by default
           if (req.method != "GET" && req.method != "HEAD") {
               return (pass);
@@ -460,4 +465,4 @@ waf:
       SecRuleRemoveByTag "platform-sybase"
       SecRuleRemoveByTag "platform-tomcat"
       SecRuleRemoveByTag "platform-windows"
-      EOF
+      EOF