bunkerity / bunkerity/bunkerweb

[BUG] Bunkerweb blocks request, error.log shows the block but reports page doesn't

Open
#3,905 1 comment 0 reactions 1 assignee Claimed by @TheophileDiot View on GitHub
bug core next minor
Dominant language
Python
Stars
10.9k
Forks
643
Avg merge
1d 10h
Merged PRs (30d)
42

Description

### What happened?

Bunkerweb blocks request, error.log shows the block but reports page doesn't

### How to reproduce?

Visit page

### Configuration file(s) (yaml or .env)

```YAML

```

### Relevant log output

```shell
2026/09/11 03:19:28 [error] 2841326#2841326: *3913074 [client XXX.XXX.XX.XX] ModSecurity: Access denied with code 400 (phase 2). Matched "Operator `Eq' with parameter `0' against variable `REQUEST_BODY_LENGTH' (Value: `427710' ) [file "/etc/nginx/subdomain.domain.tld/server-http/modsecurity-rules.conf.modsec"] [line "30"] [id "200002"] [rev ""] [msg "Failed to parse request body."] [data "Request body excluding files is bigger than the maximum expected."] [severity "2"] [ver ""] [maturity "0"] [accuracy "0"] [hostname "subdomain.domain.tld"] [uri "/livewire/message/documents"] [unique_id "17890895675.751990"] [ref "v0,1v1327,427710"], client: XXX.XXX.XX.XX, server: subdomain.domain.tld, request: "POST /livewire/message/documents HTTP/2.0", host: "subdomain.domain.tld", referrer: "https://subdomain.domain.tld/documents/uuid-uuid-uuid/edit"
```

### BunkerWeb version

1.6.14

### What integration are you using?

Linux

### Linux distribution (if applicable)

Ubuntu 24.04.4 LTS

### Removed private data

- [x] I have removed all private data from the configuration file and the logs

### Code of Conduct

- [x] I agree to follow this project's Code of Conduct

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.