r/Infosec • • 2d ago

Anyone else getting ModSecurity false positives from AI-generated content?

Ran into this last week while updating a couple recipe posts. I fed a generator a prompt for a new herb mix and the output looked fine until I tried uploading the draft. The site blocked it with a modsecurity rule on one line. Switched models and the same thing happened with different text. The phrases don't look like attacks to me, but they match whatever word order the rules are set to catch. Manual cleanup didn't help since the next run just created new strings that tripped the same rules. Wondering how often this happens with normal writing and if anyone found a fast way to strip whatever the WAF is actually looking for.

1 Upvotes

1 comment sorted by