anchor.diff:  #
   # - Producer: ModSecurity for Apache/2.7.0-rc1 (http://www.modsecurity.org/); OWASP_CRS/2.2.4.
   #
  -# Ref: https://sourceforge.net/apps/mediawiki/mod-security/index.php?title=Reference_Manual#SecComponentSignature
  -#
  -SecComponentSignature "OWASP_CRS/2.2.6"
  +# Ref: https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#wiki-SecComponentSignature 
  +#
  +SecComponentSignature "OWASP_CRS/2.2.9"
   
   
   #
  
positive.code: 
  #
  # Set the following policy settings here and they will be propagated to the 30 rules
  # file (modsecurity_crs_30_http_policy.conf) by using macro expansion.
  # If you run into false positves, you can adjust the settings here.
  #
  SecAction \
  
negative.code: # The purpose of these settings is to send CSP response headers to
  # Mozilla FireFox users so that you can enforce how dynamic content
  # is used. CSP usage helps to prevent XSS attacks against your users.
  #  
  # Reference Link:
  #
  #	https://developer.mozilla.org/en/Security/CSP
  