anchor.diff:  # operators.  If you have an earlier version, edit the 49/59 files directly to
   # set the appropriate anomaly score levels.
   #
  -# You should set the score to the proper threshold you would prefer. If set to "5"
  -# it will work similarly to previous Mod CRS rules and will create an event in the error_log
  -# file if there are any rules that match.  If you would like to lessen the number of events
  -# generated in the error_log file, you should increase the anomaly score threshold to
  -# something like "20".  This would only generate an event in the error_log file if
  -# there are multiple lower severity rule matches or if any 1 higher severity item matches.
  +# You should set the score level (rule 900003) to the proper threshold you 
  +# would prefer.  If set to "5" it will work similarly to previous Mod CRS rules
  +# and will create an event in the error_log file if there are any rules that
  +# match.  If you would like to lessen the number of events generated in the 
  +# error_log file, you should increase the anomaly score threshold to something 
  +# like "20".  This would only generate an event in the error_log file if there
  +# are multiple lower severity rule matches or if any 1 higher severity item matches.
   #
   SecAction \
     "id:'900002', \
     phase:1, \
     t:none, \
  +  setvar:tx.anomaly_score=0, \
  +  setvar:tx.sql_injection_score=0, \
  +  setvar:tx.xss_score=0, \
  +  setvar:tx.inbound_anomaly_score=0, \
  +  setvar:tx.outbound_anomaly_score=0, \
  +  nolog, \
  +  pass"
  +
  +
  +SecAction \
  +  "id:'900003', \
  +  phase:1, \
  +  t:none, \
     setvar:tx.inbound_anomaly_score_level=<%= @inbound_anomaly_threshold -%>, \
  -  nolog, \
  -  pass"
  -
  -
  -SecAction \
  -  "id:'900003', \
  -  phase:1, \
  -  t:none, \
     setvar:tx.outbound_anomaly_score_level=<%= @outbound_anomaly_threshold -%>, \
     nolog, \
     pass"
   
   
  -#
  +# 
   # -- [[ Collaborative Detection Blocking ]] -----------------------------------------------
   #
   # This is a collaborative detection mode where each rule will increment an overall
  
positive.code: #
  # - Producer: ModSecurity for Apache/2.7.0-rc1 (http://www.modsecurity.org/); OWASP_CRS/2.2.4.
  #
  # Ref: https://sourceforge.net/apps/mediawiki/mod-security/index.php?title=Reference_Manual#SecComponentSignature
  #
  SecComponentSignature "OWASP_CRS/2.2.6"
  
  
  #
  
negative.code: # The purpose of these settings is to send CSP response headers to
  # Mozilla FireFox users so that you can enforce how dynamic content
  # is used. CSP usage helps to prevent XSS attacks against your users.
  #  
  # Reference Link:
  #
  #	https://developer.mozilla.org/en/Security/CSP
  