"URL to DetectionOnly": """
        # Set one URL to DetectionOnly
        #
        SecRule REQUEST_URI "$request_uri" "phase:1,id:$rand,tag:modseccfg,tag:url-detectiononly,t:none,t:lowercase,pass,msg:'DetectionOnly for $request_uri',ctl:ruleEngine=DetectionOnly"
    """,

    #-- from REQUEST-900-EXCLUSION examples
    "Example Exclusions": {

        "Ignore param for tag": """
            # Removing a specific ARGS parameter from inspection for only certain attacks
            SecRule REQUEST_FILENAME "@endsWith $PATH" "id:$rand,phase:2,pass,nolog,tag:modseccfg,tag:ignore-param,ctl:ruleRemoveTargetByTag=attack-sqli;ARGS:pwd"
        """,

        "Ignore param for all": """

            # type: config
            # sort: pre-crs
            # class: apache
            # title: {ServerName}
            # description: early mod_security configuration
            #
            # For SecRule directives that should override CRS rules, or using modseccfg macros etc.
            # Standard SecRuleDisableById directives belong into the regular vhost.conf still.

            
            <Directory {DocumentRoot}>
               # Use SecRuleRemoveByPath 900130 /app/
               
            </Directory>
        """

# inject recipe list to main menu
def init(menu, **kwargs):
    if conf.get("user_recipes"):
        user_rec()
    i_ls = menu.index(["Recipe"]) # already a list
    menu[i_ls].append(ls(templates.__dict__))

def has(name):
    return name in templates.has


# window
class show:

                # or better: pluginconf.get_data()
                text = re.sub("[^/]+$", text.lstrip("@"), __file__)
                text = open(text, "r", encoding="utf-8").read()
            text = dedent(text).lstrip()
            text = self.repl(text, vars)
        else:
            text = text(data, vars).lstrip()
            if not text:
                return
        #print(data)
        #print(text)
        
        # create window and dispatch to main event loop
        self.w = sg.Window(title=f"Recipe '{name}'", resizable=1, layout=[
            [sg.Multiline(default_text=text, key="src", size=(90,24), font="Mono 12")],
            [sg.Button(f"Save to {self.fn}", key="save"), sg.Button("Cancel", key="cancel")]

                    return v

    # prepare vars dict from mainwindow event data + selected log line
    def vars(self, data):
        vh = vhosts.vhosts.get(data.get("confn", "-"), {})
        vars = {
            "id": "0",
            "msg": "...",
            "rand": random.randrange(2000,5000),
            "request_uri": "/PATH",
            "confn": data.get("confn"),
            "documentroot": vh.cfg.get("documentroot", "") if vh else "/srv/www"
        }
        if data.get("log"):
            for k,v in re.findall('\[(\w+) "([^"]+)"\]', str(data["log"])):
                if k in ("uri", "request_line",): k = "request_uri"
                if k in ("request_uri",): v = re.escape(v)
                vars[k] = v
        if data.get("rule"):
            vars["id"] = data["rule"][0]
            if vars["id"] in vhosts.rules:
                vars["msg"] = vhosts.rules.get(vars["id"]).msg
        return vars

    # substitute $varnames in text string
    def repl(self, text, vars):
        text = re.sub(r"\$(\w+)", lambda m,*k: str(vars.get(m.group(1), m.group(0))), text)
        return text