From 46810b8551658d47297a23666d31da64fcba9665 Mon Sep 17 00:00:00 2001
From: Daniel Glen <daniel.glen@digital.justice.gov.uk>
Date: Thu, 2 Jan 2025 11:00:57 +0000
Subject: [PATCH] Changed phase so it checks for headers then adds
 detectiononly and not the body

---
 helm_deploy/wordpress/templates/ingress.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm_deploy/wordpress/templates/ingress.yaml b/helm_deploy/wordpress/templates/ingress.yaml
index 5dde8c5..c38dfdf 100644
--- a/helm_deploy/wordpress/templates/ingress.yaml
+++ b/helm_deploy/wordpress/templates/ingress.yaml
@@ -19,7 +19,7 @@ metadata:
       # Set WAF Config for Authenticated Users
       SecRule REQUEST_HEADERS:Cookie "@contains WB_CONFIG={{ .Values.secrets.wbconfig }}"
         "id:1001,\
-        phase:2,\
+        phase:1,\
         allow,\
         nolog,\
         tag:github_team=hale-platform,\