What is the name of the domain?
What is the issue you’re encountering
I have a WAF Custom Rule (http.request.uri.path contains "/plugins/" and not http.referer contains "weusewp.com" and not cf.client.bot) or (http.request.uri.path contains "/wp-includes/" and not http.referer contains "weusewp.com" and not cf.client.bot)
It works fine. But if I combine it to (http.request.uri.path in {"/plugins/" "/wp-includes/"} and not http.referer contains "weusewp.com" and not cf.client.bot)
it doesn’t work. Am I doing anything wrong?
What is the current SSL/TLS setting?
Full