since version 8.001 (i guess) there is a layout-error in the web-interface for configuring the web-application-firewall. see attached screenshot.
because of college projekt with a friend (XSS and SQL injections) we noticed that the web-application-firewall won't detect scripts within the referrer field of the HTTP-header.
i hope this is of any help for anybody [:)]
This thread was automatically locked due to age.