Posting here to get advice on self-hosted instance, if someone uses Akamai WAF that blocks any code snippet from posting in a topic? For example, in composer following code is identified as malicious or XSS code. /home/abyss/anaconda3/lib/ export LD_LIBRARY_PATH=/usr/lib:/usr/local/lib Can I re…

[صورة] Hyan: Can I remove Akamai WAF layer, trust and rely on Discourse security protection capability? Yes, we recommending running Discourse without a WAF in front. Those were created to front legacy applications that had to be exposed to the web.

Thanks, @Falco . I don’t quite understand if there’s a clear border between legacy application and modern (Discourse like single page application?) when it comes to security. I need to learn more such as Defend Your SPA from Security Woes | Okta Developer to feel more solid.

تكوين Akamai WAF والإيجابيات الكاذبة

الدعم

Falco (Falco) 17 مارس 2025، 5:07م 3

نعم، نوصي بتشغيل Discourse دون وجود WAF أمامه. تم إنشاء تلك الحماية لحماية التطبيقات القديمة التي كان من الضروري عرضها على الويب.

الموضوع		الردود	مرات العرض
Cloudflare Security WAF (Web Application Firewall) + Discourse? Support	1	514	25 يونيو 2025
Discourse + Web Application Firewall (WAF) mod_security Self-hosting unsupported-install , hosting	8	3654	20 نوفمبر 2019
Using Discourse with Cloudflare: Best Practices Self-Hosting how-to , cloudflare	28	5593	26 أبريل 2026
How to build a Discourse Installation with an Open Source WAF Self-hosting unsupported-install	1	1883	5 أكتوبر 2019
ModSecurity exceptions Support	5	715	8 أغسطس 2019

تكوين Akamai WAF والإيجابيات الكاذبة

الموضوعات ذات الصلة