1[
2  {
3    "enabled":1,
4    "version_min":300000,
5    "title":"SecRuleEngine DetectionOnly with disruptive SecDefaultAction",
6    "client":{
7      "ip":"200.249.12.31",
8      "port":123
9    },
10    "server":{
11      "ip":"200.249.12.31",
12      "port":80
13    },
14    "request":{
15      "headers":{
16        "Host": "localhost"
17      },
18      "uri":"?a=a",
19      "method":"GET"
20    },
21    "response":{
22      "headers":{
23        "Date":"Mon, 13 Jul 2015 20:02:41 GMT",
24        "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT",
25        "Content-Type":"text/html"
26      },
27      "body":[
28        "no need."
29      ]
30    },
31    "expected":{
32      "http_code":200
33    },
34    "rules":[
35      "SecRuleEngine DetectionOnly",
36      "SecDefaultAction \"phase:1,deny,status:403\"",
37      "SecRule ARGS \"@rx a\" \"id:1,phase:1,block"
38    ]
39  }
40]
41