diff --git a/appsec-rules/crowdsecurity/crs-exclusion-plugin-google-oauth2.md b/appsec-rules/crowdsecurity/crs-exclusion-plugin-google-oauth2.md new file mode 100644 index 00000000000..bc1ac509725 --- /dev/null +++ b/appsec-rules/crowdsecurity/crs-exclusion-plugin-google-oauth2.md @@ -0,0 +1,3 @@ +This appsec-rule contains the Google OAuth2 CRS rule exclusion plugin. + +It only contains datafiles that are included by the CRS appsec-rule, so installing it without having the CRS collection will do nothing. diff --git a/appsec-rules/crowdsecurity/crs-exclusion-plugin-google-oauth2.yaml b/appsec-rules/crowdsecurity/crs-exclusion-plugin-google-oauth2.yaml new file mode 100644 index 00000000000..5a620779d8f --- /dev/null +++ b/appsec-rules/crowdsecurity/crs-exclusion-plugin-google-oauth2.yaml @@ -0,0 +1,11 @@ +name: crowdsecurity/crs-exclusion-plugin-google-oauth2 + +# This appsec-rule is only here to make crowdsec download the datafiles, inclusion is done by the CRS appsec-rules + +data: + - source_url: https://hub-data.crowdsec.net/appsec/crs-plugins/google-oauth2-exclusion-plugin/google-oauth2-before.conf + dest_file: crs-plugins/google-oauth2/google-oauth2-before.conf + type: modsec + - source_url: https://hub-data.crowdsec.net/appsec/crs-plugins/google-oauth2-exclusion-plugin/google-oauth2-config.conf + dest_file: crs-plugins/google-oauth2/google-oauth2-config.conf + type: modsec \ No newline at end of file