mod_rewrite with apache 2

[delph]

Hello,

I want to forbid the XSS in my QUERY_STRING so I put this config in my httpd.conf :

RewriteEngine On
RewriteLog /tmp/rewrite.log
RewriteLogLevel 3
#RewriteCond %{QUERY_STRING} [^a-zA-Z0-9\.,_=\/-\&]
RewriteRule . - [F]

But it didn't work.

So I test this config :

RewriteEngine On
RewriteLog /tmp/rewrite.log
RewriteLogLevel 3
RewriteCond %{QUERY_STRING} ^.*toto.*
RewriteRule . http://www.google.fr [R=302]

It didn't work and I don't have logs.

I use apache 2.0.47.

Has anyone got an idea? Thanks

Delphine

[delph]

A little precision: I use tomcat 5.0.28 with apache.