bunkerity / bunkerity/bunkerweb
[BUG] Bunkerweb blocks request, error.log shows the block but reports page doesn't
- Dominant language
- Python
- Stars
- 10.9k
- Forks
- 643
- Avg merge
- 1d 10h
- Merged PRs (30d)
- 42
Description
### What happened?
Bunkerweb blocks request, error.log shows the block but reports page doesn't
### How to reproduce?
Visit page
### Configuration file(s) (yaml or .env)
```YAML
```
### Relevant log output
```shell
2026/09/11 03:19:28 [error] 2841326#2841326: *3913074 [client XXX.XXX.XX.XX] ModSecurity: Access denied with code 400 (phase 2). Matched "Operator `Eq' with parameter `0' against variable `REQUEST_BODY_LENGTH' (Value: `427710' ) [file "/etc/nginx/subdomain.domain.tld/server-http/modsecurity-rules.conf.modsec"] [line "30"] [id "200002"] [rev ""] [msg "Failed to parse request body."] [data "Request body excluding files is bigger than the maximum expected."] [severity "2"] [ver ""] [maturity "0"] [accuracy "0"] [hostname "subdomain.domain.tld"] [uri "/livewire/message/documents"] [unique_id "17890895675.751990"] [ref "v0,1v1327,427710"], client: XXX.XXX.XX.XX, server: subdomain.domain.tld, request: "POST /livewire/message/documents HTTP/2.0", host: "subdomain.domain.tld", referrer: "https://subdomain.domain.tld/documents/uuid-uuid-uuid/edit"
```
### BunkerWeb version
1.6.14
### What integration are you using?
Linux
### Linux distribution (if applicable)
Ubuntu 24.04.4 LTS
### Removed private data
- [x] I have removed all private data from the configuration file and the logs
### Code of Conduct
- [x] I agree to follow this project's Code of Conduct
Contributor guide
Assessment
This issue has not been assessed yet.