bugfix: fix the vhost security configuration

[JGodin-C2C]

The modified variable was never passed to the template, resulting in a bad configuration of the vhost security if secrule were removed.

[JGodin-C2C]

Can we launch the re-failed tests ? seems a problem on the CI side ?

[stevegreengvl]

Seems to also cause a problem if the modsecure_disable_ids parameter is an Array, as the Hash Array built never gets passed to the "epp" processing

[JGodin-C2C]

@stevegreengvl I dont get it ,
The _modsec_disable_ids seems to be passed to the Hash "security_params" and then injected into the epp.
Is there anything i missed ?

[stevegreengvl]

@JGodin-C2C we have this in our PUppet code
apache::vhost { 'XXX':
...
modsec_disable_ids => [ array of IDs ],
...

Up to Version 11.1.0 of the Module all was fine in the generated vhost Config file, from Version 12.0 the Block below is missing from the generated file

<LocationMatch .*>
SecRuleRemoveById XXXXXX
SecRuleRemoveById YYYYYY

But I think this fix will resolve the issue

[ekohl]

I think this is correct, but it would be nice to have a test for this.