Notices by Simon John Green (simonjohngreen@calckey.social)

@pfefferle@mastodon.social

Just to follow up on this.

Using this:
https://blog.rac.me.uk/tag/owasp3/

I updated '/etc/modsecurity/crs-setup.conf'

Searched for rule '900220'

And added (rather than uncomment the existing rule):
SecAction \
"id:900220,\
phase:1,\
nolog,\
pass,\
t:none,\
setvar:'tx.allowed_request_content_type=|application/x-www-form-urlencoded| |multipart/form-data| |multipart/related| |text/xml| |application/xml| |application/soap+xml| |application/x-amf| |application/json| |application/octet-stream| |application/csp-report| |application/xss-auditor-report| |text/plain| |application/activity+json|'"

Confirmed that ModSecurity was still enable:
/etc/modsecurity/modsecurity.conf

# SecRuleEngine DetectionOnly
SecRuleEngine On

Restarted Apache.

And now I can follow / unfollow the author at will.

Thank you for pointing me to this.

Cheers!

@pfefferle@mastodon.social

Hi and thanks for getting back to me, it's very much appreciated.

I also get an 'Awaiting Authorisation' message on Mastodon when attempting to follow the WordPress author.

(This happens when the AP plugin is installed and when it is not installed.)

All of the other info (bio etc.) is being pulled in correctly.

I might have to put it down to the fact that I'm running the latest WP and the plugin says "Untested with your version of WordPress"

(Just FYI)

Thank you for your work on this.

@pfefferle@mastodon.social

Hi, I tried this today and thought you might like some feedback.

I installed OK, author pages OK, can find myself on mastodon.social OK (but not on calckey.social for some reason), can see that there are past WordPress Posts OK.

The weird thing though, when I tried to follow myself from mastodon.social it went to a 'waiting for authorisation' message, as if my WordPress site had to authorise the follow.

I couldn't see how to do that.

Also, how would I update the Profile (avatar, bio etc)?

Looks cool though.

Cheers for your work!

@pfefferle@mastodon.social

So I found myself on calckey.

Still processing the follow though.

Maybe my domain is not federating?

Looks good tho.

I think the 'Welcome" text in the plugin may be slightly wrong?

Is it missing a leading @ ?

"People can follow you by using the username Simon@simonjohngreen.endofinternet.net"

(I had to add a @ at the start for calckey to find me, but I didn't have to add one for Mastodon to find me 🤷♂️.)