Editing forbidden with admin rights in a reverse proxy setup

Help / Discuss
1

I face a problem with a fresh XWiki installation in a docker container behind an Apache2 in a reverse proxy mode.
(use Apache 2 on an Debian 9.5; XWiki the latest docker image)

The redirects works well but I cannot edit any page even as admin with set access rights. It fails with an error 403:
GET
https://myDomain/xwiki/bin/view/Main/?xpage=get&outputTitle=true&outputSyntax=annotatedxhtml&language=en&timestamp=1611619690781

raised in jquery:9175
xhr.send( options.hasContent && options.data || null );

If I go directly to the page without SSL and via the propagated docker port then I can edit the pages and all works fine, means the authorization itself should work.

It seems that I miss something in the Reverse Proxy setup but after a whole day try and error I have no idea any longer how to fix.
Even I don’t know what especially cause the error, if it is a CORS issue or a network protocol problem I don’t know.

Hope someone can give me a hint what I can do to find out and fix.
Thanks a lot

2

The problem is solved now and had nearly nothing to do with the reverse proxy than the mod_security module in Apache.
The fix worked for me is to use
SecRuleRemoveById 949110
in the vhost configuration

    # xwiki
    <Location /xwiki>
            ProxyPreserveHost On
            ProxyPass ajp://127.0.0.1:8009/xwiki
            ProxyPassReverse ajp://127.0.0.1:8009/xwiki
            SecRuleRemoveById 949110 941130 980130
    </Location>