# no tag with OWASP_CRS SecRule REQUEST_URI "@rx index.php" \ "id:1,\ phase:1,\ deny,\ t:none,\ nolog,\ tag:attack-xss"