Minor fix (KONA uses same core set rules)

stamparm · stamparm · commit b5cc1a99db06 · 2013-02-28T18:54:12.000+01:00
diff --git a/waf/modsecurity.py b/waf/modsecurity.py
@@ -17,7 +17,7 @@ def detect(get_page):
 
     for vector in WAF_ATTACK_VECTORS:
         page, headers, code = get_page(get=vector)
-        retval = code == 501
+        retval = code == 501 and re.search(r"Reference #[0-9A-Fa-f.]+", page, re.I) is None
         retval |= re.search(r"Mod_Security|NOYB", headers.get(HTTPHEADER.SERVER, ""), re.I) is not None
         if retval:
             break
