# exceptions.conf —— 误报白名单 # 当某条 CRS 规则误报时,在此用 SecRuleRemoveById 或 ctl:ruleRemoveById 关闭 # # 示例:关闭 100003 对 /login 路径的检查 # SecRule REQUEST_URI "@beginsWith /login" \ # "id:100100,phase:1,pass,nolog,ctl:ruleRemoveById=100003"