This plugin contains rule exclusions for XenForo, a PHP-based internet forum software package. These rule exclusions are designed to resolve common false positives and allow for easier integration with the OWASP CRS (CRS).

For full and up to date instructions for the different available plugin installation methods, refer to How to Install a Plugin in the official CRS documentation.

After the plugin is enabled, XenForo should work without problems caused by CRS (for example, false positives while blocking requests). If problems still occur then please file a new issue on GitHub. (Note that high paranoia level deployments may require additional tuning beyond this plugin.)

Copyright (c) 2022 OWASP CRS project. All rights reserved.

The OWASP CRS and its official plugins are distributed under Apache Software License (ASL) version 2. Please see the enclosed LICENSE file for full details.