1[ 2 { 3 "enabled":1, 4 "version_min":300000, 5 "title":"Testing Disruptive actions (1/n)", 6 "expected":{ 7 "debug_log": " Running action deny", 8 "http_code":403 9 }, 10 "rules":[ 11 "SecRuleEngine On", 12 "SecRuleEngine On", 13 "SecDefaultAction \"phase:2,deny,status:404\"", 14 "SecAction \"id:'900001',phase:request,nolog,status:403,t:none,block\"" 15 ] 16 }, 17 { 18 "enabled":1, 19 "version_min":300000, 20 "title":"Testing Disruptive actions (2/n)", 21 "expected":{ 22 "debug_log": "Rule engine disabled, returning...", 23 "http_code":200 24 }, 25 "rules":[ 26 "SecRuleEngine On", 27 "SecRuleEngine Off", 28 "SecDefaultAction \"phase:2,deny,status:404\"", 29 "SecAction \"id:'1',phase:request,nolog,t:none,block\"" 30 ] 31 }, 32 { 33 "enabled":1, 34 "version_min":300000, 35 "title":"Testing Disruptive actions (3/n)", 36 "expected":{ 37 "http_code":200 38 }, 39 "rules":[ 40 "SecRuleEngine On", 41 "SecRuleEngine DetectionOnly", 42 "SecDefaultAction \"phase:2,deny,status:404\"", 43 "SecAction \"id:'1',phase:request,nolog,nolog,block,t:none,block\"" 44 ] 45 }, 46 { 47 "enabled":1, 48 "version_min":300000, 49 "title":"Testing Disruptive actions (4/n)", 50 "expected":{ 51 "debug_log": "Rule engine disabled, returning...", 52 "http_code":200 53 }, 54 "rules":[ 55 "SecRuleEngine On", 56 "SecRuleEngine Off", 57 "SecDefaultAction \"phase:2,deny,status:404\"", 58 "SecAction \"id:'1',phase:request,nolog,t:none,block\"" 59 ] 60 }, 61 { 62 "enabled":1, 63 "version_min":300000, 64 "title":"Testing Disruptive actions (5/n)", 65 "expected":{ 66 "debug_log": "Rule engine disabled, returning...", 67 "http_code":200 68 }, 69 "rules":[ 70 "SecRuleEngine On", 71 "SecRuleEngine Off", 72 "SecDefaultAction \"phase:2,deny,status:404\"", 73 "SecAction \"id:'1',phase:request,nolog,block,t:none,block\"" 74 ] 75 } 76] 77